Pick your stack
See what your vendors published in the last 90 days.
Tick the vendors you run. The numbers are real advisories from their official sources, matched the way your alert rules would be. No account needed to look.
1. What do you run?
2. Your last 90 days
These picks would have alerted you 419 times, in 12 of the last 12 weeks.
- alerts at this priority
- 419
- advisories published
- 803
- critical
- 116
- exploited or CISA KEV
- 0
Your inbox, most recent first
- High [CVE-2026-86336] Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access restrictions being enforcedApache · 10 Nov
- High [CVE-2026-111244] When MicroProfile JWT role-based access control is used, the access constraints of JAX-RS resources are not always enforced as declared: resources that declare an empty set of allowed roles are accessible to every caller, resource classes that inherit the same method from a common superclass share their constraints, and class-level constraints declared on a superclass are ignoredApache · 10 Nov
- High [CVE-2026-111257] With the default configuration and no users defined in the default user database, TomEE silently adds an administrative user with a well-known password at startupApache · 10 Nov
3. Choose how you hear about them
One product free
One product of your choice gets real-time alerts, free for life, no card. Your other picks are saved, paused, and turn on if you start Pro.
One account per person. If you make a second account to get another free product, both accounts are banned permanently.
Free month of real-time alerts
Each new advisory for these picks by email, in the iPhone or Android app or in Discord, as soon as the vendor publishes it.
Card needed. One free month per person, then US$15/month unless you cancel; we email you 7 days and again 2 days before the first charge.