Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2024-7708Highorg.eclipse.jetty:jetty-server: Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requestsCVE-2026-8384Mediumorg.eclipse.jetty:jetty-util: Eclipse Jetty: Path parameter traversalCVE-2026-6790Mediumorg.eclipse.jetty:jetty-server: Eclipse Jetty: HTTP Authority/Host mismatchCVE-2026-10051Mediumorg.eclipse.jetty:jetty-server: Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connectionsCVE-2026-10050Highorg.eclipse.jetty:jetty-security: Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitutionCVE-2026-65589Mediumn8n: n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution DataCVE-2026-59943Mediumdompdf/dompdf: Dompdf: Embedded SVG images can leak existence of files and directories within the filesystemCVE-2026-59942Mediumdompdf/dompdf: Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image BitmapsCVE-2026-59941Mediumdompdf/dompdf: Dompdf: Uncontrolled resource consumption based on declared BMP dimensionsCVE-2026-59821Lowlitellm: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksCVE-2026-59822Highlitellm: LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackCVE-2026-59819Lowlitellm: LiteLLM: Local file read via request-supplied OIDC file referencesCVE-2026-59820Mediumlitellm: LiteLLM: Arbitrary file write via path traversal in Skills archive extractionCVE-2026-65014Mediumn8n: n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test WebhookCVE-2026-65596Mediumn8n: n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" RestrictionCVE-2026-65594Mediumn8n: n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization CheckCVE-2026-65590Mediumn8n: n8n: computer-use Shell Sandbox Not Enforced on Linux and WindowsCVE-2026-58661Mediumn8n: n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File UploadsCVE-2026-59253Mediumn8n: n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other ProjectsCVE-2026-59254Mediumn8n: n8n: External Secrets Accessible via Workflow Expressions Outside CredentialsCVE-2026-59257Mediumn8n: n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression InterpolationCVE-2026-59259Mediumn8n: n8n: External Secrets Permission Bypass via Expression Parser MismatchGHSA-PF2Q-PXHF-HGMWMediumn8n: n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base DirectoryGHSA-HX4H-VR3M-45VHMediumn8n: n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of ServiceGHSA-XWX6-JJHV-84P8Highn8n: n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo