Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-70188CriticalMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass VulnerabilityCVE-2026-96236HighMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service VulnerabilityCVE-2026-70197HighMicrosoft.NETCore.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-69651HighMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service VulnerabilityCVE-2026-102870HighMicrosoft.AspNetCore.Components.WebAssembly.Server: Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution VulnerabilityCVE-2026-96960HighSystem.Security.Cryptography.Xml: Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service VulnerabilityCVE-2026-96233HighMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service VulnerabilityGHSA-86XP-94PG-8R6RMediumMicrosoft.AspNetCore.SignalR.Protocols.MessagePack: Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service VulnerabilityCVE-2026-70162MediumSystem.Security.Cryptography.Pkcs: Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service VulnerabilityCVE-2026-96958HighSystem.Security.Cryptography.Xml: Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service VulnerabilityCVE-2026-84008HighSystem.Security.Cryptography.Pkcs: Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service VulnerabilityCVE-2026-58280HighMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityCVE-2026-70194MediumMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass VulnerabilityCVE-2026-70183HighMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass VulnerabilityCVE-2026-70196MediumMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service VulnerabilityCVE-2026-105016CriticalMicrosoft.Native.Quic.MsQuic.Schannel: Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityCVE-2026-70181HighMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service VulnerabilityCVE-2026-70175HighMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-70159HighMicrosoft.AspNetCore.SignalR.Common: Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service VulnerabilityGHSA-M687-P538-R5HPHighcode.vikunja.io/api: Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trustedGHSA-FMMF-XQ98-G327Mediumcode.vikunja.io/api: Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission checkGHSA-PJR3-86V4-5P7WMediumcode.vikunja.io/api: Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control /…GHSA-HJX8-QV73-F7CMMediumcode.vikunja.io/api: Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feedGHSA-FPRF-R6RV-XG99Mediumcode.vikunja.io/api: Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenantsGHSA-4HV6-XC92-J86GMediumcode.vikunja.io/api: Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo