logo

Database

Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

9

npm, PyPI, Maven & more

Total vulnerabilities tracked

248,208

From global vulnerability databases

5.5

Medium

Affects: npm

Package: tar

8.4

High

Affects: npm

Package: @mcpjam/inspector

FLAT-5WGTS (CVE-2026-23735)

Race condition In graphql-modules

6.6

Medium

Affects: npm

Package: graphql-modules

FLAT-66H1W (GHSA-38cw-85xc-xr9x)

SQL injection - Code In @veramo/data-store

6.1

Medium

Affects: npm

Package: @veramo/data-store

5.8

Medium

Affects: go

Package: github.com/zalando/skipper

FLAT-CY0P2 (GHSA-gw32-9rmw-qwww)

Server side cross-site scripting In svelte

5.7

Medium

Affects: npm

Package: svelte

1.2

Low

Affects: composer

Package: cakephp/cakephp

FLAT-46EJE (GHSA-5882-5rx9-xgxp)

Server side template injection In crawl4ai

8.4

High

Affects: pip

Package: crawl4ai

7.8

High

Affects: pip

Package: crawl4ai

1.3

Low

Affects: go

Package: github.com/siyuan-note/siyuan/kernel

FLAT-OV7QS (GHSA-mpwp-4h2m-765c)

OS Command Injection In activejob

6.6

Medium

Affects: gem

Package: activejob

FLAT-5XKOT (GHSA-5qw5-wf2q-f538)

SQL injection - Code In activerecord-jdbc-adapter

8.0

High

Affects: gem

Package: activerecord-jdbc-adapter

7.7

High

Affects: pip

Package: pyasn1

4.1

Medium

Affects: pip

Package: wlc

1.3

Low

Affects: pip

Package: distributed

2.7

Low

Affects: npm

Package: vnu-jar

5.2

Medium

Affects: npm

Package: admin10001

0.0

Unknown

Affects: pip

Package: apache-airflow

0.0

Unknown

Affects: go

Package: github.com/mattermost/mattermost/server/v8

6.3

Medium

Affects: pip

Package: apache-airflow

5.2

Medium

Affects: npm

Package: flip-prx

0.0

Unknown

Affects: go

Package: github.com/mattermost/mattermost/server/v8

1.2

Low

Affects: maven

Package: net.sourceforge.plantuml:plantuml

5.2

Medium

Affects: npm

Package: vue_frontend_rpc

5.2

Medium

Affects: npm

Package: sd-active-conversation-module-client

5.2

Medium

Affects: npm

Package: lusha-micro-app-messages

5.2

Medium

Affects: npm

Package: flag-v211

5.2

Medium

Affects: npm

Package: @spx-delivery/react

5.2

Medium

Affects: npm

Package: sd-ccp-module-client

5.2

Medium

Affects: npm

Package: base-ui-vue3

5.2

Medium

Affects: npm

Package: alf-ui-js

5.2

Medium

Affects: npm

Package: @wbgo/shared

5.2

Medium

Affects: npm

Package: origin_response_handler

5.2

Medium

Affects: npm

Package: flag-v21

5.2

Medium

Affects: npm

Package: sd-cip-module-client

5.2

Medium

Affects: npm

Package: sd-agent-toolbar-module-client

5.2

Medium

Affects: npm

Package: styled-system-old

5.2

Medium

Affects: npm

Package: cognito-auth-plugin

5.2

Medium

Affects: npm

Package: @wb-team/uikit-myteam-web

5.2

Medium

Affects: npm

Package: @riag-libs/pattern-library-react-hooks

5.2

Medium

Affects: npm

Package: auc-2-lib

5.2

Medium

Affects: npm

Package: victim-package-a

5.2

Medium

Affects: npm

Package: nyse-web-tools-common

5.2

Medium

Affects: npm

Package: @ux-foundry/palette

5.2

Medium

Affects: npm

Package: sky1oauth2

5.2

Medium

Affects: npm

Package: js-observability

5.2

Medium

Affects: npm

Package: spire.officejs-fonts

5.2

Medium

Affects: npm

Package: textual-sorter-lib

5.2

Medium

Affects: npm

Package: focus-trap-v2

5.2

Medium

Affects: npm

Package: omnicore-ds2-sdk

5.2

Medium

Affects: npm

Package: lead-ion

5.2

Medium

Affects: npm

Package: lusha-integrations-widgets

5.2

Medium

Affects: npm

Package: eniram-web-common-ui

5.2

Medium

Affects: npm

Package: react-sitecore-library

5.2

Medium

Affects: npm

Package: kc-fe-cli

5.2

Medium

Affects: npm

Package: tailwind-merge-v3

5.2

Medium

Affects: npm

Package: bve-react-ui-kit

5.2

Medium

Affects: npm

Package: lusha-widgets

5.2

Medium

Affects: npm

Package: idel2-content

5.2

Medium

Affects: npm

Package: s3-cache-handler

5.2

Medium

Affects: npm

Package: zis-common-lib

5.2

Medium

Affects: npm

Package: assurance-common-components

5.2

Medium

Affects: npm

Package: spire.officejs-externs

5.2

Medium

Affects: npm

Package: chakra-ui-2--react-utils

FLAT-0Y4Y7 (MAL-2026-280)

Use of software with malware In dws-dx

5.2

Medium

Affects: npm

Package: dws-dx

5.2

Medium

Affects: npm

Package: @servicepoint/vue-project

5.2

Medium

Affects: npm

Package: tailwind-merge-v2

5.2

Medium

Affects: npm

Package: sd-conversation-history-module-client

5.2

Medium

Affects: npm

Package: sd-pdc-module-client

5.2

Medium

Affects: npm

Package: lusha-ui-components

5.2

Medium

Affects: npm

Package: sparkling-router

5.2

Medium

Affects: npm

Package: insightvm-ui-nav-menus

5.2

Medium

Affects: npm

Package: closure-net

5.2

Medium

Affects: npm

Package: chakra-ui-2--styled-system

5.2

Medium

Affects: npm

Package: dibels8-content

5.2

Medium

Affects: npm

Package: sd-navbar-module-client

5.2

Medium

Affects: npm

Package: @spx-workforceops/shared-vue

5.2

Medium

Affects: npm

Package: presentation-test-utilities

5.2

Medium

Affects: npm

Package: forms-new-design

5.2

Medium

Affects: npm

Package: @spx-smartsorting/vue

5.2

Medium

Affects: npm

Package: chakra-ui-2--react

5.2

Medium

Affects: npm

Package: chakra-ui-2--theme-tools

5.2

Medium

Affects: npm

Package: comstrap

5.2

Medium

Affects: npm

Package: omnicore-ds2-sdk2

6.3

Medium

Affects: go

Package: github.com/traefik/traefik/v3

1.3

Low

Affects: composer

Package: solspace/craft-freeform

1.1

Low

Affects: composer

Package: solspace/craft-freeform

FLAT-WBUZP (CVE-2026-22775)

Asymmetric denial of service In devalue

7.7

High

Affects: npm

Package: devalue

2.7

Low

Affects: maven

Package: io.vertx:vertx-core

1.7

Low

Affects: go

Package: github.com/treeverse/lakefs

FLAT-KD44E (CVE-2026-23634)

Excessive privileges In pepr

1.7

Low

Affects: npm

Package: pepr

FLAT-4W9I6 (CVE-2025-15265)

Server side cross-site scripting In svelte

1.3

Low

Affects: npm

Package: svelte

2.7

Low

Affects: composer

Package: solspace/craft-freeform

6.3

Medium

Affects: composer

Package: alextselegidis/easyappointments

FLAT-HZ258 (CVE-2026-23527)

HTTP request smuggling In h3

8.3

High

Affects: npm

Package: h3

5.8

Medium

Affects: go

Package: github.com/getarcaneapp/arcane/backend

2.7

Low

Affects: nuget

Package: umbracocms

6.7

Medium

Affects: composer

Package: aimeos/aimeos-laravel

2.7

Low

Affects: go

Package: github.com/zitadel/zitadel

2.3

Low

Affects: composer

Package: pimcore/web2print-tools-bundle