Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-55864Highorg.geonetwork-opensource:gn-web-app: GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD ToolCVE-2026-85730Highsmol-toml: smol-toml: Denial of Service via malformed TOML documentsCVE-2026-55073Mediumweasyprint: weasyprint Has Server-Side Request Forgery (SSRF)CVE-2026-54529Mediumsqladmin: SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`CVE-2026-53495Mediumgithub.com/containerd/containerd/v2: containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-50024Mediumgithacker: GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git serverCVE-2026-44282Mediumdecidim-elections: decidim-elections: Election question titles allow stored script executionCVE-2025-58363Mediumgithub.com/lf-edge/ekuiper/v2: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation EndpointCVE-2025-24979Mediumgithub.com/lf-edge/ekuiper/v2: LF Edge eKuiper: SSRF in External ServiceCVE-2025-24978Lowgithub.com/lf-edge/ekuiper/v2: LF Edge eKuiper: Self-XSS in External Service CreationCVE-2025-24890Mediumgix-sec: gix-sec safe.directory protections absent for elevated administratorsCVE-2026-69304MediumMicrosoft.AspNetCore.Server.IISIntegration: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service VulnerabilityCVE-2026-69522HighMicrosoft.DiaSymReader.Native: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-69439HighMicrosoft.DiaSymReader.Native: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2026-71328HighMicrosoft.DiaSymReader.Native: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-86996Mediumn8n: n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller PolicyGHSA-WMMP-3585-3RMPMediumnodemailer: Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domainGHSA-2X7J-588G-CCC2Highnodemailer: Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address listGHSA-CC9R-2J5M-2M83Mediumnodemailer: Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domainGHSA-2Q42-4Q24-7RGVHigh@typespec/openapi3: OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output treeCVE-2026-77078Highmulter: multer vulnerable to Denial of Service via crafted multipart field namesCVE-2026-77037Highmulter: multer vulnerable to Denial of Service via file descriptor leak on aborted uploadsCVE-2026-77063Lowmulter: multer vulnerable to file size limit bypass via async fileFilter race conditionCVE-2026-82333Highmulter: multer vulnerable to Denial of Service via oversized array index in field namesCVE-2026-15603Mediummorgan: morgan vulnerable to Log Forging via unescaped Unicode line separators

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo