Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Cross-site Scripting (XSS)CVE-2026-6745
Affects bagisto/bagisto | Versions >=0.0.0
Has fix
ComposerPublished 5 May 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-39885
Affects @frontmcp/sdk | Versions <1.0.4
Has fix
npmPublished 5 May 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-39885
Affects @frontmcp/adapters | Versions <1.0.4
Has fix
npmPublished 5 May 2026
  • C
Malicious Package
Affects react-native-parallax-scroll-view-updated | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects bpmn-studio | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects google-storage-cloud | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects gweb-build-system | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects service-gateway | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects enterprise-auth-gateway-core | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects internal-auth-provider | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @saif777/codemirror5 | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects deployment-core | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @corp-infra/sso-gateway-core | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @atlan/connectors | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @bold-commerce/stacks-ui | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @internal-infra/core-sso-bridge | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @enterprise-core/auth-gateway-bridge | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @tech-global/internal-gateway-core | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects generator-go-circleci | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects react-video-canvas | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects secrets-manager-wrapper | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @omni-corp-infra/sso-bridge-core | Versions *
No fix available
npmPublished 5 May 2026
  • C
Malicious Package
Affects @infinid-indonesia/ui-kit | Versions *
No fix available
npmPublished 5 May 2026
  • M
Always-Incorrect Control Flow ImplementationCVE-2026-40942
Affects dev.dsf:dsf-common-pom | Versions [,2.1.0)
Has fix
MavenPublished 5 May 2026
  • M
Always-Incorrect Control Flow ImplementationCVE-2026-40942
Affects dev.dsf:dsf-common-jetty | Versions [,2.1.0)
Has fix
MavenPublished 5 May 2026
  • M
Always-Incorrect Control Flow ImplementationCVE-2026-40942
Affects dev.dsf:dsf-bpe-server | Versions [,2.1.0)
Has fix
MavenPublished 5 May 2026
  • C
Command InjectionCVE-2026-41497
Affects praisonai | Versions [,4.5.149)
Has fix
pipPublished 5 May 2026
  • H
Directory TraversalCVE-2026-39973
Affects org.apktool:apktool-lib | Versions [3.0.1,3.0.2)
Has fix
MavenPublished 5 May 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-42352
Affects pygeoapi | Versions [0.23.0,0.23.3)
Has fix
pipPublished 5 May 2026
  • H
Directory TraversalCVE-2026-42351
Affects pygeoapi | Versions [0.23.0,0.23.3)
Has fix
pipPublished 5 May 2026