Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
ise18n
| Versions
>=0.0.0
C
Malicious Package
Affects
ioe18n
| Versions
>=0.0.0
C
Malicious Package
Affects
ie18u
| Versions
>=0.0.0
C
Malicious Package
Affects
iai8n
| Versions
>=0.0.0
C
Malicious Package
Affects
i1l8n
| Versions
>=0.0.0
C
Malicious Package
Affects
i18om
| Versions
>=0.0.0
C
Malicious Package
Affects
ubnuler
| Versions
>=0.0.0
C
Malicious Package
Affects
ubnlder
| Versions
>=0.0.0
C
Malicious Package
Affects
brumdler
| Versions
>=0.0.0
C
Malicious Package
Affects
activesupmport
| Versions
>=0.0.0
M
Use After Free
Affects
sqlite3
| Versions
>=1.4.0, <2.9.6
M
Exposure of Sensitive Information Through Metadata
Affects
alchemy_cms
| Versions
<7.4.16
>=8.0.0.a, <8.3.6
H
Use After Free
CVE-2026-71847
Affects
json
| Versions
>=2.20.0, <2.21.2
M
Missing Authorization
Affects
graphql
| Versions
>=2.5.23, <2.6.6
H
Cross-site Scripting (XSS)
Affects
alchemy_cms
| Versions
<8.3.6
M
SQL Injection
Affects
activity_notification
| Versions
<2.7.0
M
Cross-site Scripting (XSS)
Affects
alchemy_cms
| Versions
<8.0.16
>=8.1.0, <8.1.15
>=8.2.0, <8.2.9
>=8.3.0, <8.3.5
M
Cross-site Scripting (XSS)
Affects
alchemy_cms
| Versions
<8.0.16
>=8.1.0, <8.1.15
>=8.2.0, <8.2.9
>=8.3.0, <8.3.5
M
Cross-site Scripting (XSS)
Affects
blazer
| Versions
>=1.7.3, <3.5.0
L
Directory Traversal
Affects
activerecord-tenanted
| Versions
<0.7.0
M
Directory Traversal
CVE-2026-54659
Affects
pagy
| Versions
>=43.0.0, <43.5.6
H
Arbitrary Code Injection
CVE-2026-66748
Affects
camaleon-cms
| Versions
>=2.1.1, <2.9.2
C
Files or Directories Accessible to External Parties
CVE-2026-66066
Affects
activestorage
| Versions
>=6.0.0.beta1, <7.2.3.2
>=8.0.0.beta1, <8.0.5.1
>=8.1.0.beta1, <8.1.3.1
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49158
Affects
thrift
| Versions
<0.24.0
C
User Impersonation
Affects
where_is_waldo
| Versions
<0.1.6
M
Cross-site Scripting (XSS)
CVE-2026-73428
Affects
action_text-trix
| Versions
<2.1.18
M
Cross-site Scripting (XSS)
CVE-2026-73648
Affects
rails-html-sanitizer
| Versions
>=1.0.3, <1.7.1
M
Directory Traversal
Affects
mpxj
| Versions
>=7.3.0, <16.5.0
H
XML External Entity (XXE) Injection
CVE-2026-61570
Affects
mpxj
| Versions
>=5.5.5, <16.4.1
H
Improper Authentication
CVE-2026-63414
Affects
shopify_app
| Versions
>=22.1.0, <23.0.3