Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

340 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

Uncaught Exception processing HTTP Headers in SurrealDB

SurrealDB: Full Table Permissions by Default

Wasmer filesystem sandbox not enforced

Candid infinite decoding loop through specially crafted payload

Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables

Pleaser privilege escalation vulnerability

Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

Denial of Service issue in quinn-proto

phonenumber panics on parsing crafted RFC3966 inputs

blurhash panics on parsing crafted inputs

Tungstenite allows remote attackers to cause a denial of service

BER/CER/DER decoder panics on invalid input

libwebp: OOB write in BuildHuffmanTable

zola Path Traversal vulnerability

lol-html panics on certain HTML inputs

Cargo not respecting umask when extracting crate archives

twitch-tui's connection is not encrypted

xml-rs vulnerable to denial of service via invalid token in XML document

Missing "--allow-net" permission check for built-in Node modules

sccache vulnerable to privilege escalation if server is run as root

Improper handling of NTS cookie length that could crash the ntpd-rs server

Interactive `run` permission prompt spoofing via improper ANSI neutralization

Frontier's modexp precompile is slow for even modulus

openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`

openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions

openssl-src contains Double free after calling `PEM_read_bio_ex`

openssl-src subject to NULL dereference validating DSA public key

openssl-src contains `NULL` dereference during PKCS7 data verification

Vulnerable OpenSSL included in cryptography wheels

Deno is vulnerable to race condition via interactive permission prompt spoofing

bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow

Denial of service by double-checked locking in openssl-src

libp2p DoS vulnerability from lack of resource management

Wasmtime may have data leakage between instances in the pooling allocator

Bug in Wasmtime implementation of pooling instance allocator

X.509 Email Address Variable Length Buffer Overflow

conduit-hyper vulnerable to Denial of Service from unchecked request length

Using a Custom Cipher with `NID_undef` may lead to NULL encryption

Exposure of sensitive Slack webhook URLs in debug logs and traces

WASM3 Improper Input Validation vulnerability

linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

axum-core has no default limit put on request bodies

NLnet Labs Routinator has Reachable Assertion vulnerability

Uncontrolled Resource Consumption in opcua

Apache Avro Rust SDK corrupted data read can cause crash

Apache Avro Rust SDK vulnerable to reader looping in cycle endlessly, consuming CPU

Apache Avro Rust SDK's Reader could consume memory beyond allowed constraints

Rust-WebSocket memory allocation based on untrusted length

`libsqlite3-sys` via C SQLite improperly validates array index

Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

Scan your dependencies for these CVEs