Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Missing Authorization
CVE-2026-11876
Affects
zenml
| Versions
[,0.95.0)
H
Deserialization of Untrusted Data
CVE-2026-68772
Affects
zenml
| Versions
[,0.96.3)
M
User Impersonation
CVE-2026-11922
Affects
zenml
| Versions
[,0.95.0)
M
Incorrect Authorization
CVE-2026-17529
Affects
astrbot
| Versions
[,4.26.0b9)
M
Regular Expression Denial of Service (ReDoS)
CVE-2026-23985
Affects
apache-superset
| Versions
[,6.0.0)
M
Improper Authorization
CVE-2026-23981
Affects
apache-superset
| Versions
[,6.0.0)
C
Command Injection
CVE-2026-42168
Affects
django-pyas2
| Versions
[0,]
C
Use of a Key Past its Expiration Date
CVE-2026-39923
Affects
flarum/framework
| Versions
<1.8.16
H
Insufficient Session Expiration
CVE-2026-39924
Affects
flarum/framework
| Versions
<1.8.16
M
CSV Injection
CVE-2026-18738
Affects
shlinkio/shlink
| Versions
>=5.0.0
H
SQL Injection
CVE-2026-18737
Affects
shlinkio/shlink
| Versions
>=3.3.1
M
Cross-site Scripting (XSS)
CVE-2026-67617
Affects
microweber/microweber
| Versions
>=0.0.0
M
Incorrect Implementation of Authentication Algorithm
CVE-2026-11430
Affects
getgrav/grav
| Versions
<2.0.9
M
Incomplete Denylist to Cross-Site Scripting
CVE-2026-71478
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
M
Directory Traversal
CVE-2026-62996
Affects
smarty/smarty
| Versions
>=5.0.0, <5.8.4
H
SQL Injection
CVE-2026-41453
Affects
krayin/laravel-crm
| Versions
<2.2.4
M
Use of Less Trusted Source
CVE-2026-63220
Affects
codeigniter4/framework
| Versions
<4.7.4
M
Cross-site Scripting (XSS)
CVE-2026-54717
Affects
silverstripe/cms
| Versions
<6.2.1
H
Directory Traversal
CVE-2026-69089
Affects
getgrav/grav
| Versions
<2.0.11
H
Arbitrary Code Injection
CVE-2026-69088
Affects
getgrav/grav
| Versions
>=2.0.7, <2.0.11
M
Asymmetric Resource Consumption (Amplification)
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
H
Excessive Platform Resource Consumption within a Loop
CVE-2026-71488
Affects
league/commonmark
| Versions
>=0.6.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
M
Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-69127
Affects
getkirby/cms
| Versions
<4.9.5
>=5.0.0-alpha.1, <5.5.2
C
Malicious Package
Affects
cubesat-upstream-driver
| Versions
[1.0.1]
H
Server-side Request Forgery (SSRF)
CVE-2026-34966
Affects
github.com/go-gitea/gitea/services/migrations
| Versions
<1.27.0
H
Server-side Request Forgery (SSRF)
CVE-2026-34966
Affects
github.com/go-gitea/gitea/routers/web/auth
| Versions
<1.27.0
H
Server-side Request Forgery (SSRF)
CVE-2026-34966
Affects
github.com/go-gitea/gitea/modules/uri
| Versions
<1.27.0