logo

Database

Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

15

Alpine, Alpm, Cargo & more

Total vulnerabilities tracked

334,244

From global vulnerability databases

Exclude malware
Reachability y

FLAT-WQTEH (CVE-2026-71870)

Improper resource allocation In pypdf

1.1

Low

Ecosystem: PyPI

Component: pypdf

FLAT-YWWUE (CVE-2026-71852)

Symmetric denial of service In pypdf

1.1

Low

Ecosystem: PyPI

Component: pypdf

8.1

High

Ecosystem: Npm

Component: crypto-js

FLAT-J6VAJ (CVE-2026-71850)

Insecure session management In hono

4.6

Medium

Ecosystem: Npm

Component: hono

1.7

Low

Ecosystem: Npm

Component: hono

FLAT-KK4A9 (CVE-2026-71848)

Improper resource allocation In hono

4.6

Medium

Ecosystem: Npm

Component: hono

FLAT-UCPT7 (CVE-2026-71847)

Improper resource allocation In json

4.6

Medium

Ecosystem: RubyGems

Component: json

6.6

Medium

Ecosystem: PyPI

Component: pymdown-extensions

5.2

Medium

Ecosystem: Packagist

Component: codeigniter4/framework

6.9

Medium

Ecosystem: Packagist

Component: codeigniter4/framework

FLAT-YNQSZ (CVE-2026-63221)

SQL injection In codeigniter4/framework

2.4

Low

Ecosystem: Packagist

Component: codeigniter4/framework

1.7

Low

Ecosystem: Packagist

Component: codeigniter4/framework

5.2

Medium

Ecosystem: Npm

Component: streak-map-kit

FLAT-0MQOO (CVE-2026-15895)

OS Command Injection In jsii-diff

5.7

Medium

Ecosystem: Npm

Component: jsii-diff

5.2

Medium

Ecosystem: Npm

Component: @nestjs-passport/jwt

5.2

Medium

Ecosystem: Npm

Component: @mrbenty8jf1p9y5/oidc-bind-canary

5.2

Medium

Ecosystem: Npm

Component: @depup/memfs

5.2

Medium

Ecosystem: Npm

Component: @depup/nuxt

5.2

Medium

Ecosystem: Npm

Component: @depup/astro

5.2

Medium

Ecosystem: Npm

Component: @depup/aws-sdk__credential-provider-process

5.2

Medium

Ecosystem: Npm

Component: @decido/backend-core

4.8

Medium

Ecosystem: Maven

Component: io.netty:netty-codec-redis

5.2

Medium

Ecosystem: Npm

Component: @catamania/front-components

4.9

Medium

Ecosystem: Packagist

Component: api-platform/core

4.6

Medium

Ecosystem: Npm

Component: @sveltejs/kit

FLAT-SGGEZ (GHSA-7c4v-fwgw-9rf7)

Enabled default configuration In nuxt

1.3

Low

Ecosystem: Npm

Component: nuxt

6.6

Medium

Ecosystem: Hex

Component: absinthe_federation

4.8

Medium

Ecosystem: Go

Component: github.com/go-git/go-git/v6

1.9

Low

Ecosystem: Go

Component: github.com/go-git/go-git/v5

5.2

Medium

Ecosystem: Npm

Component: aclade-agent

5.2

Medium

Ecosystem: Npm

Component: w-screenctl

5.2

Medium

Ecosystem: Npm

Component: agenthub-ai

5.2

Medium

Ecosystem: Npm

Component: ts-utility-plus

5.2

Medium

Ecosystem: Npm

Component: hardhat-cap

5.2

Medium

Ecosystem: PyPI

Component: atlas-internal

FLAT-FUJ34 (GHSA-wvpp-8hx9-p66j)

Insecure functionality In gitpython

7.2

High

Ecosystem: PyPI

Component: gitpython

FLAT-VIR3Z (GHSA-jm78-9fvv-mhgr)

Remote command execution In gitpython

5.2

Medium

Ecosystem: PyPI

Component: gitpython

6.5

Medium

Ecosystem: PyPI

Component: gitpython

1.9

Low

Ecosystem: PyPI

Component: gitpython

FLAT-A7VF1 (GHSA-9rj7-rf2p-w77r)

Server side template injection In gitpython

4.4

Medium

Ecosystem: PyPI

Component: gitpython

FLAT-JRM73 (GHSA-4gmw-gg2m-w46p)

Insecure functionality In gitpython

2.0

Low

Ecosystem: PyPI

Component: gitpython

FLAT-0U3J1 (GHSA-55q2-fjhq-7xh7)

Reflected cross-site scripting (XSS) In dompurify

1.2

Low

Ecosystem: Npm

Component: dompurify

4.6

Medium

Ecosystem: Packagist

Component: smarty/smarty

4.6

Medium

Ecosystem: Packagist

Component: smarty/smarty

6.9

Medium

Ecosystem: Packagist

Component: craftcms/cms

FLAT-G209L (MAL-2026-13613)

Use of software with malware In big-tss

5.2

Medium

Ecosystem: Npm

Component: big-tss

5.2

Medium

Ecosystem: Npm

Component: mangomind-agent

5.2

Medium

Ecosystem: Npm

Component: transform-es2015-unicode-regex

FLAT-KYFQP (MAL-2026-13610)

Use of software with malware In f-termx

5.2

Medium

Ecosystem: Npm

Component: f-termx

5.2

Medium

Ecosystem: Npm

Component: hardhat-set

5.2

Medium

Ecosystem: Npm

Component: @vertexa/prisma-fetch-engine

FLAT-HPRXL (MAL-2026-13605)

Use of software with malware In yakuza0

5.2

Medium

Ecosystem: Npm

Component: yakuza0

5.2

Medium

Ecosystem: Npm

Component: @aster110/cc2wechat

5.2

Medium

Ecosystem: Npm

Component: dojo-rn-interview

5.2

Medium

Ecosystem: PyPI

Component: cdktn-provider-azurerm

5.2

Medium

Ecosystem: Npm

Component: base-ui-cli

5.2

Medium

Ecosystem: Npm

Component: delivery-ci-codeceptjs

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputautocomplete

5.2

Medium

Ecosystem: Npm

Component: devplatform-spa-plugin-remote-module

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-checkablegroup

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputdate

5.2

Medium

Ecosystem: Npm

Component: delivery-ci-jira

5.2

Medium

Ecosystem: Npm

Component: dolyame-boxy-independent-bnpl-main-title

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-progressline

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputsearchtagged

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-deprecatepropshoc

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputcount

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-datatable

5.2

Medium

Ecosystem: Npm

Component: bigops-shared-product-design

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputtag

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-tablemobile

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-collapseblock

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-contextmenusearchable

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputsearch

5.2

Medium

Ecosystem: Npm

Component: devplatform-stylelint-config

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-postcsscustomproperties

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputsecure

5.2

Medium

Ecosystem: Npm

Component: delivery-ci-core

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-scrollblock

5.2

Medium

Ecosystem: Npm

Component: bnpl-blocks-atom-bnpl-faq-item

5.2

Medium

Ecosystem: Npm

Component: ded-pwa-bnpl-forms-test-demo

5.2

Medium

Ecosystem: Npm

Component: ded-pwa-c-mapping

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputfio

5.2

Medium

Ecosystem: Npm

Component: ded-pwa-c-boxy-di

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-controlgroup

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-inputphone

5.2

Medium

Ecosystem: Npm

Component: beaver-ui-popover-marker

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-cardlogo

5.2

Medium

Ecosystem: Npm

Component: platform-ui-colors

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-sortablelist

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-contextmenu

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-focusstatehoc

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-carouselline

5.2

Medium

Ecosystem: Npm

Component: ded-pwa-c-boxy

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-iconspack

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-postcssconfig

5.2

Medium

Ecosystem: Npm

Component: tailwindcss-motion-advanced

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-flatcorners

5.2

Medium

Ecosystem: Npm

Component: dolyame-ui-pageheader

5.2

Medium

Ecosystem: Npm

Component: dolyame-boxy-independent-bnpl-product-grid