Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

VIGIE VULN · VULNERABILITY INTELLIGENCE

Audit every
dependency.No build. No leaks.

VigieVuln DB is the CVE and application data database hosted in Europe that speeds up the VigieVuln CLI, a polyglot & autonomous dependency scanner built for professionals.

417 189Published vulnerabilities
307 222Advisories

Data updates : CVE List (cvelistV5) : CISA KEV : EPSS (FIRST.org) : ENISA EUVD : CERT-FR (ANSSI) : NVD (fkie-cad mirror) : OSV.dev : Library popularity : CLI cache build :

Libraries recently hit by a critical vulnerability

  1. mlflow PyPI 3.12.0rc0 – < 3.17.0CRITICAL 9.8 CWE-94 Improper Control of Generation of Code +1CVE-2026-116692 28 critical CVEs
  2. better-auth npm 1.4.0-beta.18 – < 1.7.7CRITICAL 9.1 CWE-287 Improper AuthenticationCVE-2026-114607 7 critical CVEs
  3. brotli PyPI 1.0.3 – < 1.2.1CRITICAL 9.2 CWE-787 Out-of-bounds Write +1CVE-2026-111497 2 critical CVEs
  4. brotlicffi PyPI 1.0.3 – < 1.2.1.0CRITICAL 9.2 CWE-787 Out-of-bounds Write +1CVE-2026-111497
  5. mem0ai PyPI 0.1.117 – < 1.0.8CRITICAL 9.2 CWE-89 Improper Neutralization of Special Elements used in an SQL CommandCVE-2026-115324
  6. pillow PyPI 11.0.0 – < 13.0.0CRITICAL 9.8 CWE-125 Out-of-bounds Read +1CVE-2026-96639 16 critical CVEs
  7. @sentry/nextjs npm 9.36.0 – < 9.47.2 ; 10.0.0-alpha.0 – < 10.75.2 ; 11.0.0-alpha.0 – < 11.0.0-rc.1CRITICAL 9.1 CWE-693 Protection Mechanism FailureCVE-2026-114139 2 critical CVEs
  8. trigger.dev npm < 4.5.6CRITICAL 9.2 CWE-653 Improper Isolation or CompartmentalizationCVE-2026-114087
  9. vllm PyPI 0.7.3 – < 0.31.0CRITICAL 9.2 CWE-94 Improper Control of Generation of CodeCVE-2026-114053 10 critical CVEs
  10. claude-agent-sdk PyPI < 0.2.121CRITICAL 9.2 CWE-20 Improper Input Validation +2CVE-2026-96620

See the full list

Most likely to be exploited

  1. CVE-2026-109619 CRITICAL 9.2 KEVPHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; …RCE via stale global state
  2. CVE-2026-109618 CRITICAL 9.2 KEVPHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; …RCE via OOM corruption
  3. CVE-2025-53770 CRITICAL 9.8 KEVMicrosoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5513.1001
    +2 more    Microsoft SharePoint Server Remote Code Execution Vulnerability
  4. CVE-2024-7593 CRITICAL 9.8 KEVIvanti vTM fixed in 22.7R2, 22.2R1Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 …
  5. CVE-2024-3400 CRITICAL 10.0 KEVPalo Alto Networks PAN-OS 10.2.0 – < 10.2.9-h1 ; 11.0.0 – < 11.0.4-h1 ; 11.1.0 – < 11.1.2-h3
    +2 more    PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
  6. CVE-2024-23897 CRITICAL 9.8 KEVorg.jenkins-ci.main/jenkins-core Maven 1.606 – < 2.426.3 ; 2.427 – < 2.440.1 ; 2.441 – < 2.442Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser tha…
  7. CVE-2024-21893 HIGH 8.2 KEVIvanti ICS 9.1R18 ; 22.6R2
    +1 more    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and …
  8. CVE-2024-21887 CRITICAL 9.1 KEVIvanti ICS 9.1R18 ; 22.6R2
    +1 more    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy …
  9. CVE-2023-4966 CRITICAL 9.4 KEVCitrix NetScaler ADC 14.1 – < 8.50 ; 13.1 – < 49.15 ; 13.0 – < 92.19 ; …
    +1 more    Unauthenticated sensitive information disclosure
  10. CVE-2023-44487 HIGH 7.5 KEVgolang.org/x/net Go < 0.17.0
    +10 more    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation c…

See the full list

Recently added to CISA KEV

  1. CVE-2026-97229 CRITICAL 10.0 KEVGitLab GitLab 19.2 – < 19.2.8 ; 19.3 – < 19.3.5 ; 19.4 – < 19.4.2Integer Overflow or Wraparound in GitLab
  2. CVE-2026-76418 HIGH 8.6 KEVCisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1 ; 9.16.1.28 ; 9.16.2 ; …
    +1 more    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access…
  3. CVE-2026-46300 HIGH 7.8 KEVLinux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 – < 3599e6b3cc1ada96883d496a50a210d3afbb6987 ; cef401de7be8c4e155c6746bfccf721a4fa5fab9 – < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; cef401de7be8c4e155c6746bfccf721a4fa5fab9 – < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; …
    +1 more    net: skbuff: preserve shared-frag marker during coalescing
  4. CVE-2026-41709 LOW 2.7 KEVVMware Cloud Foundation 9.1.x.x ; 9.0.x.x ; 5.x – < 5.2.4
    +3 more    ESX insufficient logging vulnerability
  5. CVE-2026-48356 CRITICAL 9.3 KEVAdobe Adobe Commerce ≤ 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18
    +3 more    Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
  6. CVE-2026-111497 CRITICAL 9.2 KEVbrotli PyPI 1.0.3 – < 1.2.1
    +1 more    Out-of-Bounds Write in Google Brotli Decoder
  7. CVE-2026-109619 CRITICAL 9.2 KEVPHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; …RCE via stale global state
  8. CVE-2026-109618 CRITICAL 9.2 KEVPHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; …RCE via OOM corruption
  9. CVE-2026-114625 CRITICAL 9.4 KEVArista Networks VeloCloud Orchestrator 5.2.0 – < 5.2.3.18 ; 6.1.0 – < 6.1.3.10 ; 6.4.0 – < 6.4.2.12Security Advisory 0199
  10. CVE-2026-110447 CRITICAL 9.2 KEVCollabora Collabora Online - Built-in CODE Server < 26.4.303Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote c…

See the full list

Public data, traceable sources

CVE records and NVD scores, OSV/GHSA package advisories and CERT-FR publications, brought together in one place.

CISA KEV, ENISA and EPSS add exploitation context. Each record links to its sources and licences.