Skip to content

Feed
Search
Check your stack
Docs
Status

Search vulnerabilities/

All · PHP · hex

Newest first. Every filter here is also a feed: see the subscribe box.

All Critical Known exploited

hex

Any npm pypi go maven crates.io packagist rubygems hex nuget

PHP

Any Next.js React Node.js Express Django Flask Ruby on Rails Spring Log4j Kubernetes Docker nginx Apache HTTP Server OpenSSL PostgreSQL MySQL Redis Microsoft SQL Server Oracle Database MariaDB IBM Db2 MongoDB SAP ASE PHP WordPress Jenkins GitLab Fortinet Citrix Ivanti Cisco IOS Palo Alto PAN-OS VMware Microsoft Exchange Google Chrome Linux kernel

No entries match these filters yet. Show everything.

Subscribe to this view

Paste into any feed reader. Changing the filters changes the URL.

RSS feed URL

RSS · Atom · JSON Feed · JSON API

What counts as “critical”?

An entry is critical when any of these hold:

it is in CISA's Known Exploited Vulnerabilities catalog,
CISA's SSVC assessment says exploitation is active,
CVSS 9.0+ in one of the listed technologies, or
CVSS 7.0+ with an EPSS score of at least 0.1 (10%).

Check your stack

Drop a lockfile (package-lock.json, uv.lock, go.sum, Cargo.lockand more) and see which vulnerabilities affect your exact versions, with a feed for new ones.

Check a lockfile

A free, public vulnerability feed. One entry per vulnerability, merged from seven sources. No account, no API key.

Data sources

CVE List
GitHub Advisory Database
OSV
NVD
CISA KEV
FIRST EPSS
Exploit-DB

Use it

Critical RSS
KEV RSS
Check a lockfile
JSON API
MCP server
llms.txt
Source status