Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-RVHP-75F6-9JQHLowMagick.NET-Q16-AnyCPU: ImageMagick: Policy Bypass possible with matrix-backed operationsGHSA-4W2J-M93H-CJ5JHighquinn-proto: Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyCVE-2026-55685Highreact-router: React Router: Unauthenticated Denial of Service via Inefficient Route MatchingCVE-2026-55628MediumMagick.NET-Q16-AnyCPU: ImageMagick: Policy Bypass in concatenate operation due to missing checksCVE-2026-55597MediumMagick.NET-Q16-AnyCPU: ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of argumentsCVE-2026-55595MediumMagick.NET-Q16-AnyCPU: ImageMagick: Infinite Loop in connected-components when providing invalid argumentsCVE-2026-55594MediumMagick.NET-Q16-AnyCPU: ImageMagick: Stack Overflow in MVG decoder due to missing depth check.CVE-2026-55575Highliquidjs: LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforceCVE-2026-55510MediumMagick.NET-Q16-AnyCPU: ImageMagick: Use-After-Free in crafted 8BIM when identifying an imageCVE-2026-54673Highbuilder-util-runtime: electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`CVE-2026-54672Highapp-builder-lib: electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`CVE-2026-54696Lowjson: Ruby json: JSON generator heap buffer overflow when streaming to an IOCVE-2026-55223Mediumcom.mchange:c3p0: c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgetsCVE-2026-53669Mediumreact-router: React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53668Mediumreact-router: React Router: Open redirect leading to XSSCVE-2026-53667Mediumreact-router: React Router: RSCErrorHandler Missing Protocol Validation (XSS)CVE-2026-53666Mediumreact-router: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53467MediumMagick.NET-Q16-AnyCPU: ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchangedCVE-2026-47219Highfind-my-way: find-my-way: DDoS with HTTP2CVE-2026-59935Highpypdf: pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)CVE-2026-59936Highpypdf: pypdf: Possible infinite loop for not terminated inline imagesCVE-2026-59937Mediumpypdf: pypdf: Possible long runtimes for repeated malformed cross-reference entries CVE-2026-59938Mediumpypdf: pypdf: Possible large memory usage for wrong image dimensionsCVE-2026-45623Highpostcss: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS commentsCVE-2026-59933Highphpoffice/phpspreadsheet: PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo