Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-49451HighMicrosoft.OpenAPI: Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing CVE-2025-53648Mediumorg.apache.gravitino:catalog-jdbc-common: Apache Gravitino JDBC configuration validation bypass can allow file reads or truncation CVE-2026-53433Mediumgithub.com/junegunn/fzf: fzf vulnerable to denial of service through quadratic HTTP request-body accumulation CVE-2026-49432Highorg.apache.activemq:apache-activemq: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp has an Improper Input Validation vulnerability CVE-2026-54475Highorg.apache.activemq:activemq-broker: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Missing Authorization vulnerability CVE-2026-53917Highorg.apache.activemq:apache-activemq: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value…CVE-2026-50750Highorg.apache.activemq:activemq-broker: Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability CVE-2026-52760Mediumorg.apache.activemq:apache-activemq: Apache ActiveMQ, Apache ActiveMQ Web Console vulnerable to Cross-site Scripting CVE-2026-50734Highorg.apache.activemq:activemq-client: Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability CVE-2026-49434Highorg.apache.activemq:activemq-broker: Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability CVE-2026-49877Highorg.apache.activemq:apache-activemq: Apache ActiveMQ Improper Authorization vulnerability CVE-2026-44840Highgithub.com/dgraph-io/dgraph/v25: Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query CVE-2026-55957Highorg.apache.tomcat.embed:tomcat-embed-core: Apache Tomcat has a Missing Critical Step in Authentication vulnerability CVE-2026-55276Criticalorg.apache.tomcat.embed:tomcat-embed-core: Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability CVE-2026-55956Mediumorg.apache.tomcat.embed:tomcat-embed-core: Apache Tomcat has an Improper Authorization vulnerability CVE-2026-55955Mediumorg.apache.tomcat:tomcat: Apache Tomcat has an Improper Authentication vulnerability CVE-2026-53434Criticalorg.apache.tomcat:tomcat-util: Apache Tomcat util accepted misconfigured CRLs CVE-2026-50229Mediumorg.apache.tomcat:tomcat: Apache Tomcat has a Cross-site Scripting vulnerability CVE-2026-53404Highorg.apache.tomcat.embed:tomcat-embed-core: Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability CVE-2026-11720Criticalgithub.com/googleapis/mcp-toolbox: MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints CVE-2026-48717Mediumorg.openidentityplatform.openam:openam-oauth2: OpenAM OAuth Authorization Bypass via PKCE Challenge CVE-2026-47426Highorg.openidentityplatform.openam:openam-oauth2: OpenAM OAuth Client Impersonation via JWKS Resolver Cache CVE-2026-47424Highorg.openidentityplatform.openam:openam-scripting: OpenAM Authenticated RCE via Groovy Sandbox Escape GHSA-QRV3-253H-G69CHighpnpm: pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo