Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Use After Free
CVE-2026-71847
Affects
json
| Versions
>=2.20.0, <2.21.2
M
Missing Authorization
Affects
graphql
| Versions
>=2.5.23, <2.6.6
H
Cross-site Scripting (XSS)
Affects
alchemy_cms
| Versions
<8.3.6
M
SQL Injection
Affects
activity_notification
| Versions
<2.7.0
M
Cross-site Scripting (XSS)
Affects
alchemy_cms
| Versions
<8.0.16
>=8.1.0, <8.1.15
>=8.2.0, <8.2.9
>=8.3.0, <8.3.5
M
Cross-site Scripting (XSS)
Affects
alchemy_cms
| Versions
<8.0.16
>=8.1.0, <8.1.15
>=8.2.0, <8.2.9
>=8.3.0, <8.3.5
M
Cross-site Scripting (XSS)
Affects
blazer
| Versions
>=1.7.3, <3.5.0
L
Directory Traversal
Affects
activerecord-tenanted
| Versions
<0.7.0
M
Directory Traversal
CVE-2026-54659
Affects
pagy
| Versions
>=43.0.0, <43.5.6
H
Arbitrary Code Injection
CVE-2026-66748
Affects
camaleon-cms
| Versions
>=2.1.1, <2.9.2
C
Files or Directories Accessible to External Parties
CVE-2026-66066
Affects
activestorage
| Versions
>=6.0.0.beta1, <7.2.3.2
>=8.0.0.beta1, <8.0.5.1
>=8.1.0.beta1, <8.1.3.1
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49158
Affects
thrift
| Versions
<0.24.0
C
User Impersonation
Affects
where_is_waldo
| Versions
<0.1.6
M
Cross-site Scripting (XSS)
Affects
action_text-trix
| Versions
<2.1.18
M
Cross-site Scripting (XSS)
Affects
rails-html-sanitizer
| Versions
>=1.0.3, <1.7.1
M
Directory Traversal
Affects
mpxj
| Versions
>=7.3.0, <16.5.0
H
XML External Entity (XXE) Injection
CVE-2026-61570
Affects
mpxj
| Versions
>=5.5.5, <16.4.1
H
Improper Authentication
CVE-2026-63414
Affects
shopify_app
| Versions
>=22.1.0, <23.0.3
H
Allocation of Resources Without Limits or Throttling
CVE-2026-50276
Affects
datadog
| Versions
<2.32.0
H
Improper Certificate Validation
Affects
omniauth-saml
| Versions
<2.2.4
C
Malicious Package
Affects
fastlane-plugin-run_tests_firebase_testlab
| Versions
=0.3.2
C
Malicious Package
Affects
git_credential_manager
| Versions
=2.8.0
=2.8.1
=2.8.2
=2.8.3
C
Malicious Package
Affects
dendreo
| Versions
=1.1.3
=1.1.4
H
Authorization Bypass Through User-Controlled Key
CVE-2026-67431
Affects
mcp
| Versions
<0.23.0
M
Allocation of Resources Without Limits or Throttling
CVE-2026-67430
Affects
mcp
| Versions
<0.23.0
C
Malicious Package
Affects
zztxtwtmp14
| Versions
=0.0.1
C
Malicious Package
Affects
zzzltestfoobarxyz
| Versions
=0.0.2
=0.0.1
C
Malicious Package
Affects
zzpdfvar11
| Versions
=0.0.1
C
Malicious Package
Affects
zwday2711778553470
| Versions
=0.0.1
C
Malicious Package
Affects
zzwandtemp1778552518
| Versions
=0.0.2
=0.0.1