Search 915,052+ security vulnerabilities and malicious packages across npm, PyPI, Go, GitHub Actions, VS Code, and 50+ ecosystems.
Track vulnerabilities across npm, PyPI, Go, Maven, NuGet, RubyGems, and more.
Updated continuously with the latest security advisories from trusted sources.
Share vulnerability details with AI assistants using optimized markdown export.
Command Injection in @oblique/cli
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains
wp-downloadmanager: Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal
In Eclipse Theia versions 1
In Eclipse Theia versions 0
In Eclipse Accessibility Tools Framework (ACTF) versions up to 1
Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
Potential information leakage from manager /network/graph API in NeuVector
Denial-of-service vulnerability in M-Files Server