Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-46369Highnimiq-blockchain: nimiq-blockchain: Validity store off by one errorCVE-2026-45694Mediumlibrenms/librenms: LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignmentCVE-2026-35445Highwinter/wn-backend-module: Winter: Authenticated backend users can bypass Users controller permission checksCVE-2026-32639Mediumwinter/wn-cms-module: Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploadsCVE-2026-32593Mediumwinter/wn-backend-module: Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjaxCVE-2026-32258Highwinter/wn-backend-module: Winter: Stored XSS through Editor Settings custom stylesCVE-2026-32257Highwinter/wn-backend-module: Winter: Stored XSS through Brand Settings custom stylesCVE-2026-9318Mediumtablib: tablib: Stored XSS in the HTML export via unescaped dataset titleCVE-2026-62902MediumMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure VulnerabilityCVE-2026-62871HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege VulnerabilityCVE-2026-62897HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution VulnerabilityCVE-2026-70354HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution VulnerabilityCVE-2026-62909MediumMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege VulnerabilityCVE-2026-62886HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege VulnerabilityCVE-2026-62901HighMicrosoft.NETCore.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service VulnerabilityCVE-2026-62899MediumMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass VulnerabilityCVE-2026-62898HighMicrosoft.NETCore.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure VulnerabilityCVE-2026-73080Criticalgithub.com/seaweedfs/seaweedfs: SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedleCVE-2026-58230High@sap/approuter: SAP Approuter has an Information Disclosure vulnerabilityCVE-2026-18948Criticalfeast: Feast vulnerable to arbitrary code execution via unsafe deserialization of dill-serialized UDFsCVE-2026-69112Mediumaccelerate: Accelerate path traversal and denial of service via sharded checkpoint weight_map entriesCVE-2026-68871Mediumapache-airflow-providers-yandex: Apache Airflow Yandex Lockbox backend allows cross-team secret disclosureCVE-2026-28672Criticalorg.apache.ranger:ranger: Apache Ranger has a Command Injection vulnerabilityCVE-2026-12570Mediumkeras: Keras model loading is vulnerable to denial of service through HDF5 shape bombsCVE-2026-12372Lownltk: NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo