Start for Free

Know every threat before it ships

200K+ vulnerabilities, malicious packages, and supply chain threats enriched with Corgea's research.

All npm PyPI Go NuGet crates.io Maven RubyGems

42,181 vulnerabilities

HIGH 7.5
NuGet

GHSA-6856-87hx-p5x7

Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability
HIGH 8.8
NuGet

CVE-2026-114152

Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

CVE-2026-118745

Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

GHSA-cfv6-4v53-fff6

Duplicate Advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

GHSA-hm4p-mv9w-4w8f

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

CVE-2026-114159

Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

CVE-2026-114158

Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

CVE-2026-114151

Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability
HIGH 7.5
NuGet

CVE-2026-114154

Microsoft Security Advisory CVE-2026-114154 - ASP.NET Core Denial of Service Vulnerability
HIGH 7.3
NuGet

CVE-2026-120778

Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability
HIGH 7.3
NuGet

CVE-2026-120792

Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability
HIGH 8.8
NuGet

GHSA-6rff-vv3p-7mrw

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

GHSA-mqcg-252r-5fj7

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability
HIGH 8.8
NuGet

GHSA-cjjx-gv54-83qh

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability
HIGH 7.5
NuGet

CVE-2026-114147

Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability
HIGH 7.5
NuGet

CVE-2026-109478

Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability
CRITICAL 9.0
NuGet

CVE-2026-114146

Microsoft Security Advisory CVE-2026-114146 - ASP.NET Core Elevation of Privilege Vulnerability
MEDIUM 5.9
NuGet

CVE-2026-114150

Microsoft Security Advisory CVE-2026-114150 - ASP.NET Core Information Disclosure Vulnerability
MEDIUM 6.5
NuGet

CVE-2026-114156

Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability
HIGH 7.5
NuGet

CVE-2026-114157

Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability
HIGH 7.5
NuGet

CVE-2026-118748

Microsoft Security Advisory CVE-2026-118748 - ASP.NET Core Denial of Service Vulnerability
HIGH 7.5
NuGet

GHSA-r33q-3g5w-gqx6

Duplicate Advisory: Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability
HIGH 7.5
NuGet

GHSA-wrm2-c2h2-4w82

Duplicate Advisory: Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability
HIGH 7.5
NuGet

CVE-2026-114155

Microsoft Security Advisory CVE-2026-114155 - .NET Elevation of Privilege Vulnerability
HIGH 7.5
NuGet

CVE-2026-109481

Microsoft Security Advisory CVE-2026-109481 - ASP.NET Core Elevation of Privilege Vulnerability
HIGH 7.5
NuGet

CVE-2026-118750

Microsoft Security Advisory CVE-2026-118750 - ASP.NET Core Denial of Service Vulnerability
HIGH 7.5
NuGet

CVE-2026-109475

Microsoft Security Advisory CVE-2026-109475 - .NET Denial of Service Vulnerability
HIGH 7.5
NuGet

CVE-2026-118749

Microsoft Security Advisory CVE-2026-118749 - ASP.NET Core Denial of Service Vulnerability
MEDIUM 5.3
NuGet

CVE-2026-120796

Microsoft Security Advisory CVE-2026-120796 - .NET Denial of Service Vulnerability
HIGH 7.5
NuGet

CVE-2026-118747

Microsoft Security Advisory CVE-2026-118747 - .NET Denial of Service Vulnerability
HIGH 7.5
NuGet

CVE-2026-120006

Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability
HIGH 7.5
NuGet

CVE-2026-114149

Microsoft Security Advisory CVE-2026-114149 - ASP.NET Core Denial of Service Vulnerability
MEDIUM 6.1
NuGet

CVE-2026-109476

Microsoft Security Advisory CVE-2026-109476 - ASP.NET Core Information Disclosure Vulnerability
UNKNOWN
npm

CVE-2026-126187

React: Unauthenticated Remote Code Execution in React Server Components
HIGH 7.3
NuGet

GHSA-fgfw-85w4-gx99

Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability
HIGH 7.5
NuGet

GHSA-95x6-7hq8-2c37

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability
MEDIUM 6.5
NuGet

GHSA-c827-j3xf-67v6

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability
HIGH 7.3
NuGet

GHSA-hfpm-4fc4-g2wc

Duplicate Advisory: Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability
HIGH 7.5
NuGet

GHSA-gxg8-5rwf-cg43

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability
HIGH 7.5
NuGet

GHSA-49q5-vjx7-5gwr

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114154 - ASP.NET Core Denial of Service Vulnerability
UNKNOWN
PyPI

CVE-2026-125123

compose-lint: File paths embedded in pull requests can inject CI workflow commands through command-line error messages 
UNKNOWN
PyPI

CVE-2026-125122

compose-lint: Text in a pull request can issue CI workflow commands through JSON and SARIF output on stdout
HIGH 7.5
RubyGems

CVE-2026-126080

Active Support: Possible DoS vulnerability in Active Support safe_constantize
MEDIUM 4.7
RubyGems

CVE-2026-126075

Active Support: Possible XSS vulnerability in Active Support MessagePack serializer
MEDIUM 5.3
RubyGems

CVE-2026-126085

Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage
HIGH 8.8
RubyGems

CVE-2026-126186

Active Storage: Possible arbitrary file read and remote code execution in video previews, analysis and image processing
MEDIUM 5.3
RubyGems

CVE-2026-126071

Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming
MEDIUM 4.3
RubyGems

CVE-2026-126074

Active Storage: Possible DoS vulnerability in Active Storage filename handling
LOW 3.7
RubyGems

CVE-2026-126068

Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress
LOW 3.1
RubyGems

CVE-2026-126067

Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores
MEDIUM 4.8
RubyGems

CVE-2026-126073

Action Pack: Possible cache poisoning in Action Pack content negotiation
MEDIUM 4.2
RubyGems

CVE-2026-126076

Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
HIGH 7.4
RubyGems

CVE-2026-126083

Action Pack: Possible IP spoofing in Action Dispatch RemoteIp
MEDIUM 5.9
npm

CVE-2026-125334

Forge: TLS client crash on a handshake record received without a session
MEDIUM 5.9
npm

CVE-2026-125332

Forge: TLS client crash on an unsupported ServerHello compression method
MEDIUM 5.9
npm

CVE-2026-125333

Forge: ReDoS in forge.http response header and cookie trimming
LOW 3.7
npm

CVE-2026-125335

Forge: Ed25519 signature verification accepts small-order public keys
LOW 3.7
npm

CVE-2026-126066

fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags
MEDIUM 4.8
npm

CVE-2026-125116

Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections
UNKNOWN
RubyGems

CVE-2026-126064

Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes