Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabExplore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Recent security developmentsImproper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action.
Recorded fixes — webpki-roots: 0.26.11 or 1.0.10; rustls-webpki: 0.103.16 or 0.104.0-alpha.8; 2 more packages. Check your release branch.
Exploitation not established
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
