Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

11

Alpm, Cargo, Debian & more

Total vulnerabilities tracked

1,318

From global vulnerability databases

Exclude malware
Package uri

5.2

Medium

Ecosystem: Npm

Package: rookie-security-test-pkg

6.5

Medium

Ecosystem: Npm

Package: dompurify

5.2

Medium

Ecosystem: Npm

Package: @cloudplatform-single-spa/security-groups

6.2

Medium

Ecosystem: Packagist

Package: symfony/security-http

2.7

Low

Ecosystem: Go

Package: github.com/crowdsecurity/crowdsec

4.6

Medium

Ecosystem: Go

Package: github.com/crowdsecurity/crowdsec

5.2

Medium

Ecosystem: Npm

Package: wm-plugin-create-iframe-capturing

5.2

Medium

Ecosystem: PyPI

Package: eth-security-auditor

0.6

Low

Ecosystem: PyPI

Package: flask-security-too

5.2

Medium

Ecosystem: Npm

Package: env-security-scanner

5.2

Medium

Ecosystem: Npm

Package: turing-sdk

5.2

Medium

Ecosystem: Npm

Package: wallet-security-checker

5.2

Medium

Ecosystem: Npm

Package: security-env-loader

5.2

Medium

Ecosystem: Npm

Package: uri-parse

1.7

Low

Ecosystem: Maven

Package: org.springaicommunity:mcp-client-security

8.0

High

Ecosystem: Maven

Package: com.azure:azure-security-keyvault-keys

FLAT-NY4UI (CVE-2026-42268)

Out-of-bounds read In mod_security

4.6

Medium

Ecosystem: RPM

Package: mod_security

FLAT-RNLLD (CVE-2026-6322)

Remote command execution In fast-uri

6.5

Medium

Ecosystem: Npm

Package: fast-uri

7.8

High

Ecosystem: Npm

Package: fast-uri

FLAT-TT5P0 (CVE-2026-44928)

Lack of data validation In uriparser

1.2

Low

Ecosystem: Debian

Package: uriparser

0.5

Low

Ecosystem: Debian

Package: uriparser

3.7

Low

Ecosystem: Maven

Package: org.opensearch.plugin:opensearch-security

2.3

Low

Ecosystem: Maven

Package: org.opensearch.plugin:opensearch-security

0.5

Low

Ecosystem: Maven

Package: org.opensearch.plugin:opensearch-security

1.7

Low

Ecosystem: Maven

Package: org.opensearch.plugin:opensearch-security

2.4

Low

Ecosystem: Cargo

Package: tauri

4.6

Medium

Ecosystem: Debian

Package: modsecurity

7.5

High

Ecosystem: Npm

Package: @tdurieux/anonymous_github

5.2

Medium

Ecosystem: Npm

Package: apple-internal-security-library-v99

5.2

Medium

Ecosystem: Npm

Package: apple-internal-security-audit-v99

5.2

Medium

Ecosystem: Npm

Package: apple-security-internal-scanner-v3

1.3

Low

Ecosystem: Maven

Package: org.jenkins-ci.plugins:script-security

3.6

Low

Ecosystem: Debian

Package: uriparser

5.9

Medium

Ecosystem: Debian

Package: node-dompurify

2.3

Low

Ecosystem: Debian

Package: node-dompurify

FLAT-6YQL7 (CVE-2026-41238)

Prototype Pollution In node-dompurify

4.0

Medium

Ecosystem: Debian

Package: node-dompurify

3.9

Low

Ecosystem: Maven

Package: org.springframework.security:spring-security-oauth2-jose

6.5

Medium

Ecosystem: Maven

Package: org.springframework.security:spring-security-config

6.5

Medium

Ecosystem: Maven

Package: org.springframework.security:spring-security-config

8.1

High

Ecosystem: Maven

Package: org.springframework.security:spring-security-web

1.7

Low

Ecosystem: Maven

Package: org.springframework.security:spring-security-core

1.7

Low

Ecosystem: Maven

Package: org.springframework.security:spring-security-core

5.2

Medium

Ecosystem: Npm

Package: apple-internal-security-poc-frank

5.2

Medium

Ecosystem: Npm

Package: express-security-policy

FLAT-GWP3J (GHSA-39q2-94rc-95cp)

Insecure functionality In dompurify

1.3

Low

Ecosystem: Npm

Package: dompurify

7.7

High

Ecosystem: NuGet

Package: system.security.cryptography.xml

7.7

High

Ecosystem: NuGet

Package: system.security.cryptography.xml

5.2

Medium

Ecosystem: Npm

Package: @aspect-security/argon2

0.5

Low

Ecosystem: Alpm

Package: python-flask-security-too

4.0

Medium

Ecosystem: Alpm

Package: uriparser

4.0

Medium

Ecosystem: Alpm

Package: uriparser

5.7

Medium

Ecosystem: Alpm

Package: python-flask-security-too

FLAT-TTLIU (CVE-2017-1000115)

Insecure session management In mercurial

6.6

Medium

Ecosystem: Alpm

Package: mercurial

FLAT-Q0VN7 (CVE-2017-1000116)

OS Command Injection In mercurial

5.9

Medium

Ecosystem: Alpm

Package: mercurial

5.2

Medium

Ecosystem: Npm

Package: nerite-security-audit

FLAT-RQ2RR (GHSA-cjmm-f4jc-qw8r)

Improper resource allocation In dompurify

1.3

Low

Ecosystem: Npm

Package: dompurify

FLAT-BCE3W (GHSA-cj63-jhhr-wcxv)

Prototype Pollution In dompurify

1.3

Low

Ecosystem: Npm

Package: dompurify

FLAT-COM5J (CVE-2026-33691)

Insecure file upload In modsecurity-crs

8.1

High

Ecosystem: Debian

Package: modsecurity-crs

FLAT-3GDS9 (CVE-2026-31934)

Improper resource allocation In suricata

6.3

Medium

Ecosystem: Debian

Package: suricata

FLAT-PZIH8 (CVE-2026-31935)

Asymmetric denial of service In suricata

7.7

High

Ecosystem: Debian

Package: suricata

FLAT-R3XUJ (CVE-2026-31937)

Asymmetric denial of service In suricata

7.7

High

Ecosystem: Debian

Package: suricata

FLAT-WTMG8 (CVE-2026-31932)

Asymmetric denial of service In suricata

6.6

Medium

Ecosystem: Debian

Package: suricata

FLAT-IGQAM (CVE-2026-31933)

Asymmetric denial of service In suricata

4.6

Medium

Ecosystem: Debian

Package: suricata

FLAT-P8KFN (CVE-2026-31931)

Asymmetric denial of service In suricata

7.7

High

Ecosystem: Debian

Package: suricata

FLAT-N3GBE (GHSA-h8r8-wccr-v5f2)

Reflected cross-site scripting (XSS) In dompurify

2.7

Low

Ecosystem: Npm

Package: dompurify

5.2

Medium

Ecosystem: Npm

Package: security-install-analytics

7.7

High

Ecosystem: Go

Package: github.com/aquasecurity/trivy

5.2

Medium

Ecosystem: PyPI

Package: anduril-sdk

6.5

Medium

Ecosystem: Maven

Package: org.springframework.security:spring-security-web

5.2

Medium

Ecosystem: Npm

Package: snort-security-tool

5.2

Medium

Ecosystem: Npm

Package: express-security-suite-2024

5.2

Medium

Ecosystem: Npm

Package: blob-internal-security-test-f63eabf7

5.2

Medium

Ecosystem: Npm

Package: bcp-security-updates

5.2

Medium

Ecosystem: Npm

Package: bcp-security-update

5.2

Medium

Ecosystem: Npm

Package: supplychain-security-demo

8.1

High

Ecosystem: Packagist

Package: simplesamlphp/xml-security

5.2

Medium

Ecosystem: Npm

Package: twitch-security

2.7

Low

Ecosystem: Npm

Package: mercurius

FLAT-H09AC (CVE-2025-64166)

Cross-site request forgery In mercurius

1.3

Low

Ecosystem: Npm

Package: mercurius

1.2

Low

Ecosystem: Npm

Package: dompurify

1.2

Low

Ecosystem: Npm

Package: dompurify

4.9

Medium

Ecosystem: Go

Package: github.com/filecoin-project/curio

5.2

Medium

Ecosystem: Npm

Package: npm-security-testing

6.7

Medium

Ecosystem: Debian

Package: modsecurity-crs

6.6

Medium

Ecosystem: NuGet

Package: system.security.cryptography.cose

8.1

High

Ecosystem: Maven

Package: org.apache.druid.extensions:druid-basic-security

0.6

Low

Ecosystem: Debian

Package: debian-security-support

2.7

Low

Ecosystem: Maven

Package: org.springframework.security:spring-security-web

0.6

Low

Ecosystem: Maven

Package: org.springframework.security:spring-security-web

FLAT-PJMSS (CVE-2026-22264)

Out-of-bounds read In suricata

6.7

Medium

Ecosystem: Debian

Package: suricata

1.7

Low

Ecosystem: Debian

Package: suricata

6.4

Medium

Ecosystem: Debian

Package: suricata

FLAT-QKGDO (CVE-2026-22261)

Asymmetric denial of service In suricata

1.7

Low

Ecosystem: Debian

Package: suricata

FLAT-YFI63 (CVE-2026-22260)

Asymmetric denial of service In suricata

6.3

Medium

Ecosystem: Debian

Package: suricata

FLAT-YHEJN (CVE-2026-22259)

Asymmetric denial of service In suricata

6.3

Medium

Ecosystem: Debian

Package: suricata

FLAT-R3PR7 (CVE-2026-22258)

Asymmetric denial of service In suricata

4.6

Medium

Ecosystem: Debian

Package: suricata

1.7

Low

Ecosystem: Maven

Package: org.springframework.security:spring-security-core

5.2

Medium

Ecosystem: PyPI

Package: anduril-lattice-sdk-grpc-python

6.7

Medium

Ecosystem: Debian

Package: modsecurity-crs

5.2

Medium

Ecosystem: Npm

Package: ofjaaah-security-lib