Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

12

Alpine, Alpm, Cargo & more

Total vulnerabilities tracked

2,988

From global vulnerability databases

Exclude malware
Package gh

5.2

Medium

Ecosystem: Npm

Package: autotel-playwright

5.2

Medium

Ecosystem: Npm

Package: eslint-plugin-executable-stories-playwright

5.2

Medium

Ecosystem: Npm

Package: executable-stories-playwright

5.2

Medium

Ecosystem: Npm

Package: @osamdefeirrighs/testhackfrrferrr

5.2

Medium

Ecosystem: Npm

Package: @redhat-cloud-services/insights-client

8.2

High

Ecosystem: Debian

Package: golang-github-cli-go-gh

5.2

Medium

Ecosystem: Npm

Package: power-platform-playwright-toolkit

5.2

Medium

Ecosystem: Npm

Package: cdk-insights

6.3

Medium

Ecosystem: Go

Package: github.com/tomwright/dasel/v3

6.3

Medium

Ecosystem: Go

Package: github.com/tomwright/dasel/v3

5.2

Medium

Ecosystem: Npm

Package: @antv/insight-component

5.2

Medium

Ecosystem: Npm

Package: @antv/lite-insight

5.2

Medium

Ecosystem: Npm

Package: @antv/g-plugin-rough-svg-renderer

5.2

Medium

Ecosystem: Npm

Package: @antv/g-plugin-rough-canvas-renderer

5.2

Medium

Ecosystem: Npm

Package: microsoft-applicationinsights-common

5.9

Medium

Ecosystem: PyPI

Package: pytorch-lightning

5.2

Medium

Ecosystem: Npm

Package: @uipath/insights-tool

5.2

Medium

Ecosystem: Npm

Package: @uipath/insights-sdk

5.2

Medium

Ecosystem: Npm

Package: @squawk/flight-math

5.2

Medium

Ecosystem: Npm

Package: @squawk/flightplan

8.1

High

Ecosystem: PyPI

Package: pytorch-lightning

6.6

Medium

Ecosystem: PyPI

Package: playwrightcapture

7.7

High

Ecosystem: Packagist

Package: flightphp/core

FLAT-BR9OL (CVE-2026-42551)

Lack of data validation In flightphp/core

5.7

Medium

Ecosystem: Packagist

Package: flightphp/core

FLAT-S7Q6Z (CVE-2026-42550)

SQL injection - Code In flightphp/core

8.4

High

Ecosystem: Packagist

Package: flightphp/core

0.4

Low

Ecosystem: Packagist

Package: flightphp/core

6.2

Medium

Ecosystem: Packagist

Package: flightphp/core

5.2

Medium

Ecosystem: PyPI

Package: playwright-atoned

5.2

Medium

Ecosystem: PyPI

Package: playwright-acustomed

3.9

Low

Ecosystem: Cargo

Package: tough

3.8

Low

Ecosystem: Cargo

Package: tough

6.8

Medium

Ecosystem: PyPI

Package: firefighter-incident

FLAT-VESZH (GHSA-8pqq-224h-x875)

Sensitive information in source code In ogham-mcp

2.7

Low

Ecosystem: PyPI

Package: ogham-mcp

5.2

Medium

Ecosystem: PyPI

Package: lightning

5.2

Medium

Ecosystem: PyPI

Package: sdoihgio9sudghsiudbg

5.2

Medium

Ecosystem: Npm

Package: lightspark-js

5.2

Medium

Ecosystem: Npm

Package: internal_insights_enabled

5.2

Medium

Ecosystem: PyPI

Package: stringhelp

5.2

Medium

Ecosystem: Npm

Package: lightweight-charts-4.1

5.2

Medium

Ecosystem: Npm

Package: ghscan-pkgcheck-test-001

5.2

Medium

Ecosystem: Npm

Package: buildkite-test-collector-playwright-example

FLAT-J1ULX (CVE-2026-39413)

Lack of data validation In lightrag-hku

8.9

High

Ecosystem: PyPI

Package: lightrag-hku

1.3

Low

Ecosystem: Alpm

Package: ghostscript

5.9

Medium

Ecosystem: Alpm

Package: ghostscript

7.3

High

Ecosystem: Alpm

Package: ghostscript

FLAT-QUGOG (CVE-2018-18073)

Excessive privileges In ghostscript

5.6

Medium

Ecosystem: Alpm

Package: ghostscript

8.1

High

Ecosystem: Alpm

Package: ghostscript

FLAT-9B57X (CVE-2019-6116)

Lack of data validation In ghostscript

5.9

Medium

Ecosystem: Alpm

Package: ghostscript

4.0

Medium

Ecosystem: Alpm

Package: ghostscript

4.3

Medium

Ecosystem: Alpm

Package: ghostscript

7.3

High

Ecosystem: Alpm

Package: ghostscript

5.9

Medium

Ecosystem: Alpm

Package: ghostscript

8.1

High

Ecosystem: Alpm

Package: ghostscript

5.7

Medium

Ecosystem: Alpm

Package: ghostscript

FLAT-JOM8A (CVE-2019-14869)

Excessive privileges In ghostscript

6.3

Medium

Ecosystem: Alpm

Package: ghostscript

FLAT-92RMZ (CVE-2021-3781)

OS Command Injection In ghostscript

7.7

High

Ecosystem: Alpm

Package: ghostscript

8.1

High

Ecosystem: PyPI

Package: lightrag-hku

FLAT-GDHXG (GHSA-3hfp-gqgh-xc5g)

Use of software with malware In @lightdash/cli

6.1

Medium

Ecosystem: Npm

Package: @lightdash/cli

5.2

Medium

Ecosystem: RubyGems

Package: monolith-twirp-reposinsights-reposinsights

8.1

High

Ecosystem: Maven

Package: com.datadoghq:dd-java-agent

5.2

Medium

Ecosystem: PyPI

Package: lightmock

5.2

Medium

Ecosystem: Npm

Package: my-not-little-durgham

5.2

Medium

Ecosystem: Npm

Package: my-little-durgham

5.2

Medium

Ecosystem: Npm

Package: ghost-module

FLAT-TNEBL (CVE-2026-4739)

Out-of-bounds read In insighttoolkit4

7.7

High

Ecosystem: Debian

Package: insighttoolkit4

3.8

Low

Ecosystem: Packagist

Package: putyourlightson/craft-sprig

3.6

Low

Ecosystem: Go

Package: github.com/tomwright/dasel/v2

5.2

Medium

Ecosystem: Npm

Package: sd-basket-highlight

5.2

Medium

Ecosystem: Npm

Package: cit-playwright-tests

5.2

Medium

Ecosystem: PyPI

Package: efghr-honeybee-sdk

5.2

Medium

Ecosystem: PyPI

Package: flyio-token-client-efgh

FLAT-A5TQ8 (CVE-2026-27135)

Inappropriate coding practices In nghttp2

6.3

Medium

Ecosystem: Debian

Package: nghttp2

5.2

Medium

Ecosystem: Npm

Package: internal-api-insights

5.2

Medium

Ecosystem: Npm

Package: fhgfhgfhfghhffhfgh

5.2

Medium

Ecosystem: Npm

Package: react-you-might-not-need-an-effect

FLAT-U6VFC (MAL-2026-1410)

Use of software with malware In ighack

5.2

Medium

Ecosystem: PyPI

Package: ighack

5.2

Medium

Ecosystem: Npm

Package: twitch-twilight-intl

FLAT-CIF23 (CVE-2026-29784)

Cross-site request forgery In ghost

5.7

Medium

Ecosystem: Npm

Package: ghost

FLAT-8RL79 (CVE-2026-29053)

Lack of data validation In ghost

5.6

Medium

Ecosystem: Npm

Package: ghost

5.2

Medium

Ecosystem: Npm

Package: naughty-package

FLAT-J6BLJ (CVE-2026-26980)

SQL injection - Code In ghost

7.8

High

Ecosystem: Npm

Package: ghost

5.2

Medium

Ecosystem: Npm

Package: pyright-root

5.9

Medium

Ecosystem: Npm

Package: @tryghost/portal

5.2

Medium

Ecosystem: Npm

Package: insightvm-ui-nav-menus

FLAT-1ARYL (CVE-2026-22596)

SQL injection - Code In ghost

5.9

Medium

Ecosystem: Npm

Package: ghost

1.2

Low

Ecosystem: Npm

Package: ghost

5.7

Medium

Ecosystem: Npm

Package: ghost

7.5

High

Ecosystem: Npm

Package: ghost

5.1

Medium

Ecosystem: Npm

Package: @playwright/mcp

5.2

Medium

Ecosystem: Npm

Package: elf-stats-sleighing-hammer-902

5.2

Medium

Ecosystem: Npm

Package: elf-stats-bright-pinecone-706

FLAT-V1JX6 (MAL-2025-192664)

Use of software with malware In asdfgh33

5.2

Medium

Ecosystem: Npm

Package: asdfgh33

5.2

Medium

Ecosystem: Npm

Package: elf-stats-nutmeg-sleigh-350

7.6

High

Ecosystem: Go

Package: github.com/redhatinsights/runtimes-inventory-operator

FLAT-2WV1I (CVE-2025-67750)

XAML injection In lightning-flow-scanner

5.8

Medium

Ecosystem: Npm

Package: lightning-flow-scanner

5.2

Medium

Ecosystem: Npm

Package: elf-stats-tinsel-sleigh-669

5.2

Medium

Ecosystem: Npm

Package: elf-stats-evergreen-nightcap-747

5.2

Medium

Ecosystem: Npm

Package: elf-stats-marzipan-nightcap-982

5.2

Medium

Ecosystem: Npm

Package: elf-stats-festive-sleigh-368

5.2

Medium

Ecosystem: Npm

Package: elf-stats-sleighing-drum-467