Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo
cocoapods
Composer
Conan
Go
hex
Maven
npm
NuGet
pip
pub
RubyGems
Swift
Unmanaged (C/C++)
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
VULNERABILITY
AFFECTS
TYPE
PUBLISHED
C
Malicious Package
apollo-ms
*
npm
22 Aug 2025
M
Regular Expression Denial of Service (ReDoS)
org.webjars.npm:yarn
[0,]
Maven
22 Aug 2025
M
Regular Expression Denial of Service (ReDoS)
yarn
*
npm
22 Aug 2025
M
Cross-site Scripting (XSS)
org.webjars.bower:markdown-it
[0,]
Maven
22 Aug 2025
M
Cross-site Scripting (XSS)
org.webjars.bowergithub.markdown-it:markdown-it
[0,]
Maven
22 Aug 2025
M
Cross-site Scripting (XSS)
org.webjars.npm:markdown-it
[0,]
Maven
22 Aug 2025
M
Cross-site Scripting (XSS)
markdown-it
*
npm
22 Aug 2025
M
Authentication Bypass
libjwt
[0,]
Conan
22 Aug 2025
M
Integer Overflow or Wraparound
glib
[2.75.3,2.85.3)
Conan
22 Aug 2025
M
Server-side Request Forgery (SSRF)
org.apache.eventmesh:eventmesh-runtime
[1.6.0,]
Maven
21 Aug 2025
L
Authentication Bypass Using an Alternate Path or Channel
com.liferay:com.liferay.multi.factor.authentication.web
[,2.0.42)
Maven
21 Aug 2025
M
Cross-site Scripting (XSS)
com.liferay:com.liferay.journal.web
[0,]
Maven
21 Aug 2025
C
Function Call With Incorrect Argument Type
org.webjars.npm:sha.js
[,2.4.12)
Maven
21 Aug 2025
C
Function Call With Incorrect Argument Type
sha.js
<2.4.12
npm
21 Aug 2025
M
Cross-site Scripting (XSS)
librenms/librenms
<25.8.0
Composer
21 Aug 2025
M
Denial of Service (DoS)
libjpeg-turbo
[,1.4.2)
Unmanaged (C/C++)
21 Aug 2025
M
Denial of Service (DoS)
libjpeg-turbo
[,1.4.2)
Unmanaged (C/C++)
21 Aug 2025
M
Server-side Request Forgery (SSRF)
johnbillion/wp-crontrol
>=1.17.0, <1.19.2
Composer
21 Aug 2025
M
Arbitrary File Upload
com.liferay:com.liferay.dynamic.data.mapping.form.web
[,4.0.180)
Maven
21 Aug 2025
H
Deserialization of Untrusted Data
nemo-toolkit
[,2.3.2)
pip
21 Aug 2025
H
Command Injection
webdataset
[0,]
pip
21 Aug 2025
M
Improper Initialization
id-map
>=0.1.6 <0.2.2
Cargo
21 Aug 2025
M
Information Exposure
com.liferay.portal:com.liferay.portal.kernel
[,160.0.0)
Maven
21 Aug 2025
M
Information Exposure
com.liferay:com.liferay.calendar.service
[,6.0.83)
Maven
21 Aug 2025
M
Information Exposure
com.liferay:com.liferay.calendar.web
[,5.0.106)
Maven
21 Aug 2025
M
Information Exposure
com.liferay.portal:com.liferay.portal.impl
[,111.0.0)
Maven
21 Aug 2025
C
User Impersonation
github.com/hydraide/hydraide/sdk/go/hydraidego/client
<0.2.0
Go
21 Aug 2025
C
User Impersonation
github.com/hydraide/hydraide/app/server/server
<0.2.0
Go
21 Aug 2025
C
User Impersonation
github.com/hydraide/hydraide/app/hydraidectl/cmd/utils/servicehelper
<0.2.0
Go
21 Aug 2025
C
User Impersonation
github.com/hydraide/hydraide/app/hydraidectl/cmd/utils/instancerunner
<0.2.0
Go
21 Aug 2025