Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Improper AuthenticationCVE-2026-40946
Affects github.com/oxia-db/oxia/oxiad/common/rpc/auth | Versions <0.16.2
Has fix
GoPublished 28 Apr 2026
  • H
Race ConditionCVE-2026-40943
Affects github.com/oxia-db/oxia/oxiad/dataserver/controller/lead | Versions <0.16.2
Has fix
GoPublished 28 Apr 2026
  • M
Improper Certificate ValidationCVE-2026-40944
Affects github.com/oxia-db/oxia/common/security | Versions <0.16.2
Has fix
GoPublished 28 Apr 2026
  • H
Directory TraversalCVE-2026-40876
Affects github.com/patrickhener/goshs/sftpserver | Versions <2.0.0-beta.6
Has fix
GoPublished 28 Apr 2026
  • C
Unsafe Dependency ResolutionCVE-2026-40903
Affects github.com/patrickhener/goshs/httpserver | Versions <2.0.0-beta.6
Has fix
GoPublished 28 Apr 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-40884
Affects github.com/patrickhener/goshs/sanity | Versions <2.0.0-beta.6
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-40883
Affects github.com/patrickhener/goshs/httpserver | Versions >=2.0.0-beta.4 <2.0.0-beta.6
Has fix
GoPublished 28 Apr 2026
  • H
Insertion of Sensitive Information into Log FileCVE-2026-40885
Affects github.com/patrickhener/goshs/httpserver | Versions >=2.0.0-beta.4 <2.0.0-beta.6
Has fix
GoPublished 28 Apr 2026
  • H
Improper AuthenticationCVE-2026-40910
Affects github.com/fatedier/frp/pkg/util/vhost | Versions >=0.43.0 <0.68.1
Has fix
GoPublished 28 Apr 2026
  • H
Improper AuthenticationCVE-2026-40910
Affects github.com/fatedier/frp/pkg/util/version | Versions >=0.43.0 <0.68.1
Has fix
GoPublished 28 Apr 2026
  • M
SQL InjectionCVE-2026-39946
Affects github.com/openbao/openbao/plugins/database/postgresql | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Uncontrolled RecursionCVE-2026-39396
Affects github.com/openbao/openbao/helper/pluginutil | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Uncontrolled RecursionCVE-2026-39396
Affects github.com/openbao/openbao/command/server | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Improper Certificate ValidationCVE-2026-39388
Affects github.com/openbao/openbao/builtin/credential/cert | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Improper Restriction of Security Token AssignmentCVE-2026-40264
Affects github.com/openbao/openbao/vault | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • H
Access Control BypassCVE-2026-33031
Affects github.com/0xjacky/nginx-ui/internal/user | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • H
Access Control BypassCVE-2026-33031
Affects github.com/0xjacky/nginx-ui/api/user | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • M
Missing Origin Validation in WebSocketsCVE-2026-34403
Affects github.com/0xjacky/nginx-ui/mcp | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • M
Missing Origin Validation in WebSocketsCVE-2026-34403
Affects github.com/0xjacky/nginx-ui/internal/middleware | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • M
Missing Origin Validation in WebSocketsCVE-2026-34403
Affects github.com/0xjacky/nginx-ui/api | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40481
Affects github.com/monetr/monetr/server/controller | Versions <1.12.4
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/v2/endpoints/publicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/v2/endpoints/dynamicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/endpoints/proxyui | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/v2/endpoints/proxyui | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/endpoints/publicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/endpoints/dynamicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/v2/endpoints/publicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/v2/endpoints/dynamicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/endpoints/dynamicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026