logo

Database

Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

15

Alpine, Alpm, Cargo & more

Total vulnerabilities tracked

354,262

From global vulnerability databases

6.1

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

5.7

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

3.8

Low

Ecosystem: Go

Component: github.com/canonical/lxd

FLAT-VRL6M (CVE-2026-55649)

Server side cross-site scripting In geonode

5.0

Medium

Ecosystem: PyPI

Component: geonode

FLAT-E8JIQ (CVE-2026-46429)

Insecure file upload In geonode

5.1

Medium

Ecosystem: PyPI

Component: geonode

FLAT-E2VO0 (CVE-2026-33050)

OS Command Injection In geonode

4.4

Medium

Ecosystem: PyPI

Component: geonode

4.9

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

FLAT-EZ4WM (GHSA-pjff-c2wc-f6jm)

Lack of data validation In github.com/canonical/lxd

6.1

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

FLAT-916CC (GHSA-fmc8-p6q7-75cc)

Lack of data validation In github.com/canonical/lxd

6.1

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

7.7

High

Ecosystem: Go

Component: github.com/canonical/lxd

6.1

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

4.6

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

1.3

Low

Ecosystem: Go

Component: github.com/canonical/lxd

FLAT-LITFH (CVE-2026-62361)

SQL injection In github.com/knadh/listmonk

5.2

Medium

Ecosystem: Go

Component: github.com/knadh/listmonk

6.1

Medium

Ecosystem: Go

Component: github.com/osac-project/osac-operator

1.3

Low

Ecosystem: Maven

Component: org.eclipse.hawkbit:hawkbit-ddi-resource

FLAT-8UMTA (MAL-2026-18732)

Use of software with malware In monobomber

5.2

Medium

Ecosystem: Npm

Component: monobomber

FLAT-GKDPK (MAL-2026-18733)

Use of software with malware In monopw

5.2

Medium

Ecosystem: Npm

Component: monopw

FLAT-MQFCC (MAL-2026-18734)

Use of software with malware In tw-motion-css

5.2

Medium

Ecosystem: Npm

Component: tw-motion-css

5.2

Medium

Ecosystem: Npm

Component: wisdomtreetest

5.2

Medium

Ecosystem: Npm

Component: @ts-expect-error/n

5.2

Medium

Ecosystem: Npm

Component: @sideeffects/n

5.2

Medium

Ecosystem: Npm

Component: @noinheritdoc/n

FLAT-II8DJ (MAL-2026-18724)

Use of software with malware In @site-cms/ssr

5.2

Medium

Ecosystem: Npm

Component: @site-cms/ssr

5.2

Medium

Ecosystem: Npm

Component: @needsaudit/nexport

FLAT-Q6DHC (MAL-2026-18720)

Use of software with malware In @needsaudit/n

5.2

Medium

Ecosystem: Npm

Component: @needsaudit/n

FLAT-LJ9PO (MAL-2026-18731)

Use of software with malware In zero2-baileys

5.2

Medium

Ecosystem: Npm

Component: zero2-baileys

5.2

Medium

Ecosystem: Npm

Component: evmos-contracts

FLAT-GFBSY (MAL-2026-18726)

Use of software with malware In arc-contracts

5.2

Medium

Ecosystem: Npm

Component: arc-contracts

5.2

Medium

Ecosystem: Npm

Component: securedrop-app

5.2

Medium

Ecosystem: Npm

Component: kc-kline-chart

FLAT-2XZBT (GHSA-2q7f-mf9f-5qhr)

HTTP request smuggling In actix-http

1.7

Low

Ecosystem: Cargo

Component: actix-http

FLAT-L3XNI (GHSA-8hcm-m7r7-frwc)

Local file inclusion In actix-files

6.3

Medium

Ecosystem: Cargo

Component: actix-files

FLAT-9A1J9 (GHSA-v27v-f96q-qhjq)

Insecure encryption algorithm In vodozemac

0.5

Low

Ecosystem: Cargo

Component: vodozemac

FLAT-89WJD (GHSA-qph8-7859-gq2f)

Improper resource allocation In actix-web

2.3

Low

Ecosystem: Cargo

Component: actix-web

FLAT-CKWM6 (GHSA-mxcm-mrw6-c446)

Insecurely deleted files In vodozemac

0.5

Low

Ecosystem: Cargo

Component: vodozemac

FLAT-8BXOV (GHSA-7p9w-p5qm-5gc5)

Improper resource allocation In actix-http

4.6

Medium

Ecosystem: Cargo

Component: actix-http

FLAT-R73ZX (CVE-2026-115701)

Improper resource allocation In cowboy

4.6

Medium

Ecosystem: Hex

Component: cowboy

FLAT-T84S4 (CVE-2026-113431)

Improper resource allocation In cowlib

6.6

Medium

Ecosystem: Hex

Component: cowlib

FLAT-WTAB9 (CVE-2026-66294)

XML injection (XXE) In saxy

0.5

Low

Ecosystem: Hex

Component: saxy

FLAT-IATZU (CVE-2026-66295)

XPath injection In saxy

0.5

Low

Ecosystem: Hex

Component: saxy

FLAT-3FPKW (CVE-2026-66293)

XML injection (XXE) In saxy

0.5

Low

Ecosystem: Hex

Component: saxy

5.2

Medium

Ecosystem: Npm

Component: @kora20030101/test-pkg-delete-me

5.2

Medium

Ecosystem: Npm

Component: @exclipz/bails

5.2

Medium

Ecosystem: Npm

Component: @exclipz/baileys

6.8

Medium

Ecosystem: Go

Component: github.com/blakesmith/ar

8.3

High

Ecosystem: Go

Component: github.com/mark3labs/mcp-go

FLAT-DBR1P (GO-2026-6893)

Spoofing In github.com/google/go-eventlog

0.6

Low

Ecosystem: Go

Component: github.com/google/go-eventlog

6.1

Medium

Ecosystem: Go

Component: github.com/andybalholm/brotli

2.3

Low

Ecosystem: Go

Component: github.com/crewjam/saml

3.3

Low

Ecosystem: Go

Component: kubevirt.io/kubevirt

8.1

High

Ecosystem: Go

Component: github.com/imgproxy/imgproxy/v4

FLAT-Z5FAN (GHSA-494m-4556-wf5p)

Out-of-bounds read In github.com/imgproxy/imgproxy

6.6

Medium

Ecosystem: Go

Component: github.com/imgproxy/imgproxy

6.6

Medium

Ecosystem: Go

Component: github.com/imgproxy/imgproxy/v4

6.6

Medium

Ecosystem: Go

Component: github.com/klauspost/compress

6.3

Medium

Ecosystem: Go

Component: github.com/distribution/distribution

4.9

Medium

Ecosystem: Go

Component: github.com/360entsecgroup-skylar/excelize/v2

6.6

Medium

Ecosystem: Go

Component: github.com/360entsecgroup-skylar/excelize/v2

6.6

Medium

Ecosystem: Go

Component: github.com/360entsecgroup-skylar/excelize/v2

FLAT-G88TK (MAL-2026-18715)

Use of software with malware In talk-lang

5.2

Medium

Ecosystem: Npm

Component: talk-lang

FLAT-S1R7K (MAL-2026-18714)

Use of software with malware In plain-lang

5.2

Medium

Ecosystem: Npm

Component: plain-lang

FLAT-8B7H0 (MAL-2026-18709)

Use of software with malware In test1817

5.2

Medium

Ecosystem: Npm

Component: test1817

5.2

Medium

Ecosystem: Npm

Component: @gemshell/win32-x64

FLAT-3EA3B (CVE-2026-119434)

Excessive privileges In ezstd

4.6

Medium

Ecosystem: Hex

Component: ezstd

FLAT-0DV8L (CVE-2026-62300)

Improper resource allocation In filecoin-pin

2.3

Low

Ecosystem: Npm

Component: filecoin-pin

FLAT-D6S1P (CVE-2026-61536)

Remote command execution In banks

5.2

Medium

Ecosystem: PyPI

Component: banks

8.1

High

Ecosystem: Go

Component: github.com/chainguard-dev/kaniko

5.6

Medium

Ecosystem: Go

Component: github.com/canonical/lxd

FLAT-9QASR (MAL-2026-18707)

Use of software with malware In dsh-purge

5.2

Medium

Ecosystem: Npm

Component: dsh-purge

5.2

Medium

Ecosystem: Npm

Component: @nuri.yavuz.tr.2/my-unique-pinger

5.2

Medium

Ecosystem: PyPI

Component: mcp-teamviewer

FLAT-9RWV2 (RUSTSEC-2026-0449)

Non-upgradable dependencies In ocipkg

1.3

Low

Ecosystem: Cargo

Component: ocipkg

5.2

Medium

Ecosystem: PyPI

Component: teamviewer-mcp-server

FLAT-AGDU6 (MAL-2026-18704)

Use of software with malware In dbt-adapter

5.2

Medium

Ecosystem: PyPI

Component: dbt-adapter

FLAT-XZ1DE (MAL-2026-18703)

Use of software with malware In synapse-hub

5.2

Medium

Ecosystem: Npm

Component: synapse-hub

FLAT-G43MY (MAL-2026-18658)

Use of software with malware In rcp-ndcg

5.2

Medium

Ecosystem: PyPI

Component: rcp-ndcg

FLAT-KRGFH (MAL-2026-18657)

Use of software with malware In strands-aidr

5.2

Medium

Ecosystem: PyPI

Component: strands-aidr

FLAT-9OER4 (MAL-2026-18713)

Use of software with malware In rafael-bails

5.2

Medium

Ecosystem: Npm

Component: rafael-bails

FLAT-6FHCL (MAL-2026-18712)

Use of software with malware In oktz-baileys

5.2

Medium

Ecosystem: Npm

Component: oktz-baileys

FLAT-61ZYL (MAL-2026-18711)

Use of software with malware In nishiki-bail

5.2

Medium

Ecosystem: Npm

Component: nishiki-bail

FLAT-3A1VL (MAL-2026-18710)

Use of software with malware In kurobails

5.2

Medium

Ecosystem: Npm

Component: kurobails

5.2

Medium

Ecosystem: Npm

Component: wet_rat_replicate_automation

5.2

Medium

Ecosystem: Npm

Component: unemployed_xerinae-toolteadev

5.2

Medium

Ecosystem: Npm

Component: related_blackbird-toolteadev

5.2

Medium

Ecosystem: Npm

Component: quiche-tea-curut

5.2

Medium

Ecosystem: Npm

Component: peas-tea-curut

5.2

Medium

Ecosystem: Npm

Component: pearx93qja-notthedevs

5.2

Medium

Ecosystem: Npm

Component: maila-talijah-alpha-128

5.2

Medium

Ecosystem: Npm

Component: low_hummingbird_replicate_automation

5.2

Medium

Ecosystem: Npm

Component: dian-peyek23-miaww

5.2

Medium

Ecosystem: Npm

Component: dependent-final

FLAT-20G8H (CVE-2026-122299)

Lack of data validation In dulwich

4.9

Medium

Ecosystem: Debian

Component: dulwich

5.2

Medium

Ecosystem: Npm

Component: @secauditb20y/sec-test-b1

5.2

Medium

Ecosystem: Npm

Component: @secaudita10x/sec-test-a1

5.2

Medium

Ecosystem: Npm

Component: dogmans-afterglow

5.2

Medium

Ecosystem: Npm

Component: thththtbhthhth

5.2

Medium

Ecosystem: Npm

Component: doghack-afterglow

FLAT-O404C (MAL-2026-18655)

Use of software with malware In nannnnnnnnn

5.2

Medium

Ecosystem: Npm

Component: nannnnnnnnn

FLAT-H8QUX (MAL-2026-18654)

Use of software with malware In heheheshsds

5.2

Medium

Ecosystem: Npm

Component: heheheshsds

5.2

Medium

Ecosystem: Npm

Component: @saidddddddddd/ggsgg