Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-5321
Affects vanna | Versions [0,]
Has fix
pipPublished 2 Apr 2026
  • M
Missing Authentication for Critical FunctionCVE-2026-5320
Affects vanna | Versions [0,]
Has fix
pipPublished 2 Apr 2026
  • M
Insufficient EntropyCVE-2026-34236
Affects auth0/auth0-php | Versions >=8.0.0-BETA1, <8.19.0
Has fix
ComposerPublished 2 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-34746
Affects payload | Versions <3.79.1
Has fix
npmPublished 2 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-34748
Affects @payloadcms/ui | Versions <3.78.0
Has fix
npmPublished 2 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-34748
Affects @payloadcms/plugin-mcp | Versions <3.78.0
Has fix
npmPublished 2 Apr 2026
  • H
Directory TraversalCVE-2026-34750
Affects @payloadcms/storage-s3 | Versions <3.78.0
Has fix
npmPublished 2 Apr 2026
  • H
Directory TraversalCVE-2026-34750
Affects @payloadcms/storage-r2 | Versions <3.78.0
Has fix
npmPublished 2 Apr 2026
  • H
Directory TraversalCVE-2026-34750
Affects @payloadcms/storage-gcs | Versions <3.78.0
Has fix
npmPublished 2 Apr 2026
  • H
Directory TraversalCVE-2026-34750
Affects payload | Versions <3.78.0
Has fix
npmPublished 2 Apr 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-34749
Affects payload | Versions <3.79.1
Has fix
npmPublished 2 Apr 2026
  • M
SQL InjectionCVE-2026-34747
Affects payload | Versions <3.79.1
Has fix
npmPublished 2 Apr 2026
  • M
SQL InjectionCVE-2026-34747
Affects @payloadcms/drizzle | Versions <3.79.1
Has fix
npmPublished 2 Apr 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-5199
Affects go.temporal.io/server/service/worker/batcher | Versions >=1.29.0 <1.29.5>=1.30.0 <1.30.3
Has fix
GoPublished 2 Apr 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-5199
Affects github.com/temporalio/temporal/service/worker/batcher | Versions >=1.29.0 <1.29.5>=1.30.0 <1.30.3
Has fix
GoPublished 2 Apr 2026
  • M
Time-of-check Time-of-use (TOCTOU) Race Condition
Affects onnx | Versions [,1.21.0)
Has fix
pipPublished 2 Apr 2026
  • M
Deserialization of Untrusted DataCVE-2026-2265
Affects replicator | Versions *
No fix available
npmPublished 2 Apr 2026
  • M
Improperly Controlled Modification of Dynamically-Determined Object AttributesCVE-2026-34445
Affects onnx | Versions [,1.21.0)
Has fix
pipPublished 2 Apr 2026
  • M
UNIX Symbolic Link (Symlink) FollowingCVE-2026-34446
Affects onnx | Versions [,1.21.0)
Has fix
pipPublished 2 Apr 2026
  • M
UNIX Symbolic Link (Symlink) FollowingCVE-2026-34447
Affects onnx | Versions [,1.21.0)
Has fix
pipPublished 2 Apr 2026
  • H
Directory TraversalCVE-2026-34591
Affects poetry | Versions [1.4.0,2.3.3)
Has fix
pipPublished 2 Apr 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-22815
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-34515
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-34513
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • M
HTTP Response SplittingCVE-2026-34514
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • M
Information ExposureCVE-2026-34518
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-34517
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • M
HTTP Request SmugglingCVE-2026-34525
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-34516
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026
  • M
HTTP Response SplittingCVE-2026-34519
Affects aiohttp | Versions [,3.13.4)
Has fix
pipPublished 2 Apr 2026