Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter

Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover

esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

RustFS: Missing Post Policy Validation leads to Arbitrary Object Write

Rollup 4 has Arbitrary File Write via Path Traversal

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

n8n: Expression Sandbox Escape Leads to RCE

Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change

n8n has Arbitrary Command Execution via File Write and Git Operations

n8n has Potential Remote Code Execution via Merge Node

n8n has a Sandbox Escape in its JavaScript Task Runner

n8n has Arbitrary File Read via Python Code Node Sandbox Escape

n8n has Unauthenticated Expression Evaluation via Form Node

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

ImageMagick: Memory Leak in multiple coders that write raw pixel data

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

mageMagick has a possible use-after-free write in its PDB decoder

ImageMagick has a possible heap Use After Free vulnerability in its meta coder

Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

Parse Dashboard is Missing Authorization for its Agent Endpoint

Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Parse Dashboard has incomplete authentication on AI Agent endpoint

c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()

@enclave-vm/core is vulnerable to Sandbox Escape

OliveTin: OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds

Statamic is vulnerable to account takeover via password reset link injection

Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance

Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future

Caddy: Unicode case-folding length expansion causes incorrect split_path index in FastCGI transport

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed

FUXA has JWT Authentication Bypass via HTTP Referer header spoofing

OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE

ImageMagick: Invalid MSL <map> can result in a use after free

ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

ImageMagick has a heap buffer over-read in its MAP image decoder

ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

Scan your dependencies for these CVEs