Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

12

Alpine, Alpm, Cargo & more

Total vulnerabilities tracked

2,384

From global vulnerability databases

Exclude malware
Package tar

5.2

Medium

Ecosystem: Npm

Package: @redhat-cloud-services/quickstarts-client

FLAT-8UMMS (GHSA-3pv8-6f4r-ffg2)

Lack of data validation In tar

2.7

Low

Ecosystem: Cargo

Package: tar

7.6

High

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

5.2

Medium

Ecosystem: Npm

Package: @service-suppliers/set_suppliers_loading_start

FLAT-05JWH (CVE-2026-48710)

Lack of data validation In starlette

2.7

Low

Ecosystem: Debian

Package: starlette

5.2

Medium

Ecosystem: PyPI

Package: m-at-star-tools

7.7

High

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

5.2

Medium

Ecosystem: PyPI

Package: tarpackage

5.2

Medium

Ecosystem: Npm

Package: @starmind/collector-cli

5.2

Medium

Ecosystem: Npm

Package: boring-avatars-vanilla

7.5

High

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

5.8

Medium

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

7.7

High

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

FLAT-PUBKI (GHSA-3cv2-h65g-fgmm)

Insecure object reference In astral-tokio-tar

2.7

Low

Ecosystem: Cargo

Package: astral-tokio-tar

1.7

Low

Ecosystem: Npm

Package: @tanstack/start-server-core

5.2

Medium

Ecosystem: Npm

Package: @tanstack/vue-start-client

5.2

Medium

Ecosystem: Npm

Package: @tanstack/solid-start-client

5.2

Medium

Ecosystem: Npm

Package: @tanstack/solid-start-server

5.2

Medium

Ecosystem: Npm

Package: @tanstack/solid-start

5.2

Medium

Ecosystem: Npm

Package: @tanstack/start-client-core

5.2

Medium

Ecosystem: Npm

Package: @tanstack/start-fn-stubs

5.2

Medium

Ecosystem: Npm

Package: @tanstack/start-plugin-core

5.2

Medium

Ecosystem: Npm

Package: @tanstack/start-server-core

5.2

Medium

Ecosystem: Npm

Package: @tanstack/start-static-server-functions

5.2

Medium

Ecosystem: Npm

Package: @tanstack/start-storage-context

5.2

Medium

Ecosystem: Npm

Package: @tanstack/vue-start-server

5.2

Medium

Ecosystem: Npm

Package: @tanstack/vue-start

5.2

Medium

Ecosystem: Npm

Package: @tanstack/react-start

5.2

Medium

Ecosystem: Npm

Package: @tanstack/react-start-server

5.2

Medium

Ecosystem: Npm

Package: @tanstack/react-start-rsc

5.2

Medium

Ecosystem: Npm

Package: @tanstack/react-start-client

5.2

Medium

Ecosystem: Npm

Package: @tanstack/eslint-plugin-start

5.2

Medium

Ecosystem: Npm

Package: @google-pay-trust/start

5.2

Medium

Ecosystem: Npm

Package: ally-starter-api

FLAT-EKSBU (CVE-2026-40561)

HTTP request smuggling In starlet

1.7

Low

Ecosystem: Debian

Package: starlet

6.6

Medium

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

FLAT-CCFH8 (CVE-2026-40560)

HTTP request smuggling In starman

1.7

Low

Ecosystem: Debian

Package: starman

5.2

Medium

Ecosystem: PyPI

Package: robase-start

2.7

Low

Ecosystem: Cargo

Package: astral-tokio-tar

FLAT-V9AM2 (GHSA-fp55-jw48-c537)

Insecure object reference In astral-tokio-tar

6.6

Medium

Ecosystem: Cargo

Package: astral-tokio-tar

5.2

Medium

Ecosystem: Npm

Package: @apple-pay-trust/start

5.2

Medium

Ecosystem: PyPI

Package: elementary-data

5.2

Medium

Ecosystem: Npm

Package: eslint-plugin-totara

5.2

Medium

Ecosystem: Npm

Package: pil2-stark-js

5.2

Medium

Ecosystem: Npm

Package: hardhat-starter-kit

5.2

Medium

Ecosystem: Npm

Package: ccip-starter-kit-hardhat

5.2

Medium

Ecosystem: Npm

Package: agent-starter

5.2

Medium

Ecosystem: Npm

Package: upstart-offer-container

5.2

Medium

Ecosystem: Npm

Package: upstartloans

5.2

Medium

Ecosystem: Npm

Package: upstartdr

5.2

Medium

Ecosystem: Npm

Package: upstartapplicationstatus

5.2

Medium

Ecosystem: Npm

Package: upstartportal

5.2

Medium

Ecosystem: Npm

Package: upstartadmindashboard-

5.2

Medium

Ecosystem: Npm

Package: upstart-loan-status

5.2

Medium

Ecosystem: Npm

Package: upstart.previewcss

5.2

Medium

Ecosystem: Npm

Package: upstartautoretailadmin

5.2

Medium

Ecosystem: Npm

Package: upstart-lending-status

4.5

Medium

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

2.7

Low

Ecosystem: Maven

Package: tech.powerjob:powerjob-server-starter

2.7

Low

Ecosystem: Maven

Package: tech.powerjob:powerjob-server-starter

FLAT-C0S3O (CVE-2018-20482)

Improper resource allocation In tar

1.9

Low

Ecosystem: Alpm

Package: tar

1.0

Low

Ecosystem: Alpm

Package: tar

6.6

Medium

Ecosystem: Alpm

Package: tar

5.5

Medium

Ecosystem: Debian

Package: tar

5.2

Medium

Ecosystem: PyPI

Package: target-iceberg

1.2

Low

Ecosystem: Cargo

Package: tar

FLAT-VXIZO (CVE-2026-33055)

Lack of data validation In tar

1.2

Low

Ecosystem: Cargo

Package: tar

FLAT-A22SS (MAL-2026-1969)

Use of software with malware In spstargm

5.2

Medium

Ecosystem: Npm

Package: spstargm

4.8

Medium

Ecosystem: Maven

Package: org.springframework.boot:spring-boot-starter-actuator

6.5

Medium

Ecosystem: Maven

Package: org.springframework.boot:spring-boot-starter-actuator

1.7

Low

Ecosystem: Debian

Package: rust-astral-tokio-tar

5.2

Medium

Ecosystem: Npm

Package: @emerald-react/avatar

5.2

Medium

Ecosystem: Npm

Package: transform-new-target

1.5

Low

Ecosystem: PyPI

Package: bedrock-agentcore-starter-toolkit

5.6

Medium

Ecosystem: Npm

Package: tar

5.6

Medium

Ecosystem: Debian

Package: node-tar

5.2

Medium

Ecosystem: Npm

Package: pear-apps-utils-avatar-initials

9.0

Critical

Ecosystem: Debian

Package: node-tar

5.2

Medium

Ecosystem: Npm

Package: responses-starter-app

2.7

Low

Ecosystem: Npm

Package: nanotar

FLAT-60G1E (CVE-2026-25480)

Improper resource allocation In litestar

1.7

Low

Ecosystem: PyPI

Package: litestar

2.7

Low

Ecosystem: PyPI

Package: litestar

FLAT-DV4IB (CVE-2026-25478)

Lack of data validation In litestar

5.7

Medium

Ecosystem: PyPI

Package: litestar

5.2

Medium

Ecosystem: Npm

Package: @rsgweb/rockstar-account

5.2

Medium

Ecosystem: Npm

Package: tailwindcss-forms-starter

0.6

Low

Ecosystem: Npm

Package: decompress-tar

0.6

Low

Ecosystem: Maven

Package: org.springframework.boot:spring-boot-starter-data-rest

FLAT-H6X3E (JAVA-COMSTARKBANKELLIPTICCURVE-1913039)

Lack of data validation In com.starkbank.ellipticcurve:starkbank-ecdsa

0.6

Low

Ecosystem: Maven

Package: com.starkbank.ellipticcurve:starkbank-ecdsa

FLAT-LYUXH (MAL-2026-694)

Use of software with malware In tarax

5.2

Medium

Ecosystem: Npm

Package: tarax

7.9

High

Ecosystem: Npm

Package: tar

3.7

Low

Ecosystem: Npm

Package: @vltpkg/tar

6.7

Medium

Ecosystem: Npm

Package: tar

5.5

Medium

Ecosystem: Debian

Package: node-tar

5.8

Medium

Ecosystem: Go

Package: github.com/getarcaneapp/arcane/backend

6.6

Medium

Ecosystem: Npm

Package: tarteaucitronjs

5.2

Medium

Ecosystem: Npm

Package: aws-target-mediator

5.2

Medium

Ecosystem: Npm

Package: ing-feat-mortgage-consent-starter

5.2

Medium

Ecosystem: Npm

Package: start-log-plugin

5.2

Medium

Ecosystem: Npm

Package: start-log-backend

5.2

Medium

Ecosystem: Npm

Package: elf-stats-caroling-star-725