Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Missing Authorization
CVE-2026-55518
Affects
avo
| Versions
<3.32.1
>=4.0.0.beta.0, <4.0.0.beta.51
M
Directory Traversal
CVE-2026-49342
Affects
yard
| Versions
<0.9.44
H
Uncontrolled Recursion
CVE-2026-54297
Affects
faraday
| Versions
<1.10.6
>=2.0.0, <2.14.3
M
Incorrect Resource Transfer Between Spheres
CVE-2026-54171
Affects
excon
| Versions
<1.5.0
H
Integer Overflow or Wraparound
CVE-2026-54903
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-54900
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-54901
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-54902
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-54899
Affects
oj
| Versions
<3.17.3
H
Stack-based Buffer Overflow
CVE-2026-54502
Affects
oj
| Versions
<3.17.3
M
Use of Uninitialized Resource
CVE-2026-54500
Affects
oj
| Versions
<3.17.3
H
Out-of-bounds Write
CVE-2026-54592
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-54897
Affects
oj
| Versions
<3.17.3
H
Heap-based Buffer Overflow
CVE-2026-54896
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-54898
Affects
oj
| Versions
<3.17.3
H
Use After Free
CVE-2026-57438
Affects
nokogiri
| Versions
<1.19.4
H
XML External Entity (XXE) Injection
CVE-2026-57234
Affects
nokogiri
| Versions
<1.19.4
M
Wrap-around Error
CVE-2026-54905
Affects
concurrent-ruby
| Versions
<1.3.7
M
Improper Locking
CVE-2026-54906
Affects
concurrent-ruby
| Versions
<1.3.7
H
Infinite loop
CVE-2026-54904
Affects
concurrent-ruby
| Versions
<1.3.7
M
Open Redirect
CVE-2026-54605
Affects
oauth
| Versions
>=0.5.5, <1.1.6
M
Arbitrary Command Injection
CVE-2026-47242
Affects
net-imap
| Versions
<0.4.25
>=0.5.0, <0.5.15
>=0.6.0, <0.6.4.1
L
Collapse of Data into Unsafe Value
CVE-2026-47241
Affects
net-imap
| Versions
<0.4.25
>=0.5.0, <0.5.15
>=0.6.0, <0.6.4.1
H
Arbitrary Command Injection
CVE-2026-47240
Affects
net-imap
| Versions
<0.4.25
>=0.5.0, <0.5.15
>=0.6.0, <0.6.4.1
H
Unprotected Transport of Credentials
CVE-2026-54603
Affects
oauth2
| Versions
>=0.4.0, <2.0.22
H
User Impersonation
CVE-2026-47737
Affects
puma
| Versions
>=5.5.0, <7.2.1
>=8.0.0, <8.0.2
H
Allocation of Resources Without Limits or Throttling
CVE-2026-47736
Affects
puma
| Versions
>=5.5.0, <7.2.1
>=8.0.0, <8.0.2
M
CSV Injection
Affects
spree_core
| Versions
>=5.2.0, <5.2.8
>=5.3.0, <5.3.6
>=5.4.0, <5.4.3
H
User Impersonation
CVE-2026-44476
Affects
doorkeeper-openid_connect
| Versions
<1.10.0
M
Improper Encoding or Escaping of Output
CVE-2026-44587
Affects
carrierwave
| Versions
<2.2.7
>=3.0.0.beta, <3.1.3