Vulnerability Database

Search the MergeBase vulnerability database for information on known vulnerabilities in open-source components.

Risk Score

#score-progress-count

Out of 10

Summary

#id-text

CWEs

#cwes-text

Published

#published-text

Updated

#updated-text

Source

NVD

Identifier

#dentifier-text-item

Description

#description-text

MergeBase Comment

#mergebase-comment

Common Weakness Enumeration (CWE)

CWE-502

Deserialization of Untrusted Data

Open Source Protection

Stay on top of the real risk of open source at any time.

Avoid false positives and get sophisticated upgrade guidance based on risk, compatibility and popularity."

Add RunTime Protection

Detect and defend against known-vulnerabilities at runtime. The only SCA to do so.

The quickest way to respond to an imminent threat like log4j with CVE-2021-44228.

Shift Left Now

CodeGreen is an early-warning defence for your in-house development and integrates directly into GitHub and BitBucket