Media
CVE-2026-25475
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.032
Restablecer filtros
Crítica
CVE-2026-25052
n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
Alta
CVE-2026-25051
n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
Alta
CVE-2026-23897
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`
Alta
CVE-2025-61917
n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner
Media
CVE-2026-25155
Qwik City CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)
Baja
CVE-2026-25149
Qwik City Open Redirect via fixTrailingSlash
Crítica
CVE-2026-25150
Prototype Pollution via FormData Processing in Qwik City
Media
CVE-2026-25148
Qwik SSR XSS via Unsafe Virtual Node Serialization
Alta
CVE-2026-25547
@isaacs/brace-expansion has Uncontrolled Resource Consumption
Alta
CVE-2026-24887
Claude Code has a Command Injection in find Command Bypasses User Approval Prompt
Alta
CVE-2026-24053
Claude Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
Alta
CVE-2026-24052
Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains
Media
CVE-2026-1664
Cloudflare Agents SDK has Insecure Direct Object Reference (IDOR) via Header-Based Email Routing
Alta
CVE-2025-69983
FUXA allows Remote Code Execution (RCE) via the project import functionality.
Alta
CVE-2025-69981
FUXA contains an Unrestricted File Upload vulnerability
Alta
CVE-2025-69970
FUXA contains an insecure default configuration vulnerability
Alta
CVE-2026-24884
Compressing Vulnerable to Arbitrary File Write via Symlink Extraction
Alta
CVE-2026-25157
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Alta
CVE-2026-25253
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl
Alta
CVE-2026-24763
OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable
Media
CVE-2026-25228
SignalK Server has Path Traversal leading to information disclosure
Alta
CVE-2026-25223
Fastify's Content-Type header tab character allows body validation bypass
Crítica
CVE-2026-25521
locutus is vulnerable to Prototype Pollution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.