logo

Database

Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

12

Alpine, Debian, Go & more

Total vulnerabilities tracked

306,287

From global vulnerability databases

FLAT-N5M1B (CVE-2026-27602)

OS Command Injection In modoboa

7.6

High

Affects: PyPI

Package: modoboa

FLAT-YJFKU (CVE-2026-27496)

Inappropriate coding practices In n8n

4.9

Medium

Affects: Npm

Package: n8n

FLAT-793UL (CVE-2026-25645)

Insecure temporary files In requests

3.3

Low

Affects: PyPI

Package: requests

5.2

Medium

Affects: Npm

Package: omaronsec

FLAT-X0KB9 (MAL-2026-2197)

Use of software with malware In allergan

5.2

Medium

Affects: Npm

Package: allergan

5.2

Medium

Affects: Npm

Package: omicnavigatorwebapp

FLAT-022F8 (GHSA-5mg7-485q-xm76)

Use of software with malware In litellm

5.6

Medium

Affects: PyPI

Package: litellm

5.2

Medium

Affects: Npm

Package: tailwind-compile

5.2

Medium

Affects: Npm

Package: @sixcore/baileys

5.2

Medium

Affects: Npm

Package: super-alias

FLAT-LVP64 (MAL-2026-2194)

Use of software with malware In ffsixx

5.2

Medium

Affects: Npm

Package: ffsixx

5.2

Medium

Affects: Npm

Package: changelog-utils-logger

5.2

Medium

Affects: Npm

Package: changelog-utils-wrapper

FLAT-AA6BH (MAL-2026-2190)

Use of software with malware In ts-bign

5.2

Medium

Affects: Npm

Package: ts-bign

5.2

Medium

Affects: Npm

Package: levex-refa

5.2

Medium

Affects: Npm

Package: simple-util-kit

5.2

Medium

Affects: PyPI

Package: vision-service-python-client-internal

5.2

Medium

Affects: PyPI

Package: vision-service-python-client

5.2

Medium

Affects: PyPI

Package: hy-api-utilities

5.2

Medium

Affects: PyPI

Package: auth0-ai-ms-agent

FLAT-RWTQR (MAL-2026-2177)

Use of software with malware In linting

5.2

Medium

Affects: PyPI

Package: linting

5.2

Medium

Affects: PyPI

Package: yeshsurya

5.2

Medium

Affects: PyPI

Package: facebookresearch

5.2

Medium

Affects: PyPI

Package: fairness-bias

FLAT-Q12TG (MAL-2026-2171)

Use of software with malware In globally

5.2

Medium

Affects: PyPI

Package: globally

FLAT-KEYWZ (MAL-2026-2172)

Use of software with malware In v2-8-3

5.2

Medium

Affects: PyPI

Package: v2-8-3

5.2

Medium

Affects: PyPI

Package: sonic-config-engine

5.2

Medium

Affects: PyPI

Package: sonic-yang-mgmt

FLAT-VW77D (MAL-2026-2176)

Use of software with malware In kusto

5.2

Medium

Affects: PyPI

Package: kusto

5.2

Medium

Affects: PyPI

Package: sonic-platform-common

5.2

Medium

Affects: PyPI

Package: batch-shipyard

5.2

Medium

Affects: PyPI

Package: aristanetworks

5.2

Medium

Affects: PyPI

Package: python-glue

FLAT-5G2UO (MAL-2026-2178)

Use of software with malware In lm-sys

5.2

Medium

Affects: PyPI

Package: lm-sys

5.2

Medium

Affects: Npm

Package: @shennmine/baileys

5.2

Medium

Affects: Npm

Package: @shennmine/libsignal-node

5.2

Medium

Affects: Npm

Package: console-loggers

5.2

Medium

Affects: Npm

Package: chai-patch

5.2

Medium

Affects: Npm

Package: @rexxtheproject/elaina-baileys

5.2

Medium

Affects: Npm

Package: @rexxtheproject/keyed-db

5.2

Medium

Affects: Npm

Package: @rexxtheproject/elaina-libsignal

5.2

Medium

Affects: Npm

Package: chai-as-chain

5.2

Medium

Affects: Npm

Package: path-external

5.2

Medium

Affects: Npm

Package: @eric-orderbuddyinfo/react-noval

5.2

Medium

Affects: Npm

Package: svg-sizer-responsive

5.2

Medium

Affects: PyPI

Package: torchunmix

5.2

Medium

Affects: Npm

Package: chai-as-emitted

5.2

Medium

Affects: Npm

Package: pino-pretty-log

5.2

Medium

Affects: Npm

Package: tailwind-animationbasis

5.2

Medium

Affects: Npm

Package: transitive_lib

5.2

Medium

Affects: Npm

Package: @xvortexsockets/baileys

0.5

Low

Affects: Debian

Package: nss

0.6

Low

Affects: Debian

Package: chromium

1.7

Low

Affects: Go

Package: github.com/lin-snow/ech0

5.2

Medium

Affects: PyPI

Package: mattermost-data-warehouse

FLAT-BEDGA (MAL-2026-2150)

Use of software with malware In snooty

5.2

Medium

Affects: PyPI

Package: snooty

5.2

Medium

Affects: PyPI

Package: sentry-filter-forks

5.2

Medium

Affects: PyPI

Package: mattermost-airflow

5.2

Medium

Affects: PyPI

Package: databricks-clean-room-orchestrator

5.2

Medium

Affects: PyPI

Package: compose-rl

5.2

Medium

Affects: PyPI

Package: target-iceberg

5.2

Medium

Affects: PyPI

Package: tap-wordpress

FLAT-CU2RF (GHSA-xw6w-9jjh-p9cr)

Improper resource allocation In scriban

6.3

Medium

Affects: NuGet

Package: scriban

FLAT-O82E0 (GHSA-m2p3-hwv5-xpqw)

Improper resource allocation In scriban

3.8

Low

Affects: NuGet

Package: scriban

FLAT-OFXII (GHSA-xcx6-vp38-8hr5)

Improper resource allocation In scriban

7.7

High

Affects: NuGet

Package: scriban

FLAT-UTZAD (GHSA-v66j-x4hw-fv9g)

Improper resource allocation In scriban

6.3

Medium

Affects: NuGet

Package: scriban

FLAT-AZLUO (GHSA-c875-h985-hvrc)

Improper resource allocation In scriban

7.7

High

Affects: NuGet

Package: scriban

FLAT-0KYEY (GHSA-5wr9-m6jw-xx44)

Security controls bypass or absence In scriban

8.0

High

Affects: NuGet

Package: scriban

FLAT-Y55FX (MAL-2026-2144)

Use of software with malware In litellm

5.2

Medium

Affects: PyPI

Package: litellm

FLAT-3KGW2 (GHSA-x6m9-38vm-2xhf)

Insecure encryption algorithm In scriban

6.3

Medium

Affects: NuGet

Package: scriban

FLAT-ID2RJ (GHSA-p6q4-fgr8-vx4p)

Improper resource allocation In scriban

7.7

High

Affects: NuGet

Package: scriban

0.6

Low

Affects: Go

Package: github.com/nats-io/nats-server/v2

0.6

Low

Affects: Go

Package: github.com/nats-io/nats-server/v2

1.3

Low

Affects: Go

Package: github.com/nats-io/nats-server/v2

5.6

Medium

Affects: Go

Package: github.com/nats-io/nats-server/v2

6.3

Medium

Affects: Go

Package: github.com/nats-io/nats-server/v2

6.3

Medium

Affects: Go

Package: github.com/nats-io/nats-server/v2

5.7

Medium

Affects: Go

Package: github.com/nats-io/nats-server/v2

6.5

Medium

Affects: Go

Package: github.com/nats-io/nats-server/v2

8.3

High

Affects: Go

Package: github.com/nats-io/nats-server/v2

6.3

Medium

Affects: Go

Package: github.com/nats-io/nats-server/v2

FLAT-OCGE0 (CVE-2026-3889)

Spoofing In thunderbird

1.3

Low

Affects: Debian

Package: thunderbird

FLAT-RALBW (CVE-2026-4371)

Out-of-bounds read In thunderbird

6.7

Medium

Affects: Debian

Package: thunderbird

8.1

High

Affects: Go

Package: github.com/nats-io/nats-server/v2

2.2

Low

Affects: Packagist

Package: invoiceninja/invoiceninja

0.6

Low

Affects: Go

Package: github.com/nats-io/nats-server/v2

5.2

Medium

Affects: PyPI

Package: roboat-util

FLAT-5EXVX (MAL-2026-2143)

Use of software with malware In roboated

5.2

Medium

Affects: PyPI

Package: roboated

4.9

Medium

Affects: Npm

Package: parse-server

FLAT-4ZWTP (CVE-2026-33412)

OS Command Injection In vim

3.8

Low

Affects: Debian

Package: vim

1.7

Low

Affects: Debian

Package: php-league-commonmark

5.2

Medium

Affects: PyPI

Package: corexloader

5.2

Medium

Affects: PyPI

Package: coreloader

FLAT-OQ1QR (CVE-2026-33624)

Race condition In parse-server

0.5

Low

Affects: Npm

Package: parse-server

1.7

Low

Affects: Go

Package: github.com/pinchtab/pinchtab

5.9

Medium

Affects: Go

Package: github.com/pinchtab/pinchtab/cmd/pinchtab

2.1

Low

Affects: Go

Package: github.com/pinchtab/pinchtab/cmd/pinchtab

5.2

Medium

Affects: PyPI

Package: stats-helpers

1.3

Low

Affects: Go

Package: github.com/pinchtab/pinchtab

0.5

Low

Affects: Go

Package: github.com/pinchtab/pinchtab