pub vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-34240Highjose: jose vulnerable to untrusted JWK header key acceptance during signature verification GHSA-3HPF-FF72-J67PLowshared_preferences_android: shared_preferences_android vulnerability CVE-2024-48915Highagent_dart: Agent Dart is missing certificate verification checks CVE-2024-29886Mediumserverpod_auth_server: Serverpod improved security for stored password hashes CVE-2024-29887Highserverpod_client: Serverpod client accepts any certificate CVE-2023-26154Mediumpubnub: pubnub Insufficient Entropy vulnerability CVE-2023-39139Higharchive: Path traversal in Archive CVE-2023-39137Higharchive: Filename spoofing in archive CVE-2021-31402Highdio: dio vulnerable to CRLF injection with HTTP method string CVE-2023-22963Lowpersonnummer: personnummer/dart vulnerable to Improper Input Validation CVE-2020-35669Mediumhttp: http before 0.13.3 vulnerable to header injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo