Alta
CVE-2026-2293
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2026-3304
Multer vulnerable to Denial of Service via incomplete cleanup
Alta
CVE-2026-2359
Multer vulnerable to Denial of Service via resource exhaustion
Alta
ghsa-5c6j-r48x-rmvq
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
Alta
CVE-2026-2880
@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware
Baja
CVE-2026-82259
SvelteKit has deserialization expansion in unvalidated `form` remote function leading to Denial of Service (experimental only)
Media
CVE-2026-32898
OpenClaw ACP client has permission auto-approval bypass via untrusted tool metadata
Media
CVE-2026-4039
OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)
Media
CVE-2026-27638
@actual-app/sync-server: Missing authorization in sync endpoints allows cross-user budget file access in multi-user mode
Alta
CVE-2026-27970
Angular i18n vulnerable to Cross-Site Scripting
Alta
CVE-2026-26862
CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage
Alta
CVE-2026-26861
CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function
Crítica
CVE-2026-28363
OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode
Media
CVE-2026-56360
n8n has Webhook Forgery on Zendesk Trigger Node
Media
CVE-2026-56349
n8n has a Guardrail Node Bypass
Media
CVE-2026-56353
n8n has an Authentication Bypass in its Chat Trigger Node
Media
CVE-2026-56350
n8n has an SSO Enforcement Bypass in its Self-Service Settings API
Alta
CVE-2026-27959
Koa has Host Header Injection via ctx.hostname
Baja
CVE-2026-27942
fast-xml-parser has stack overflow in XMLBuilder with preserveOrder
Media
CVE-2026-27902
Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers
Media
CVE-2026-27901
Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`
Alta
CVE-2026-27903
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
Alta
CVE-2026-27904
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Media
CVE-2026-27837
dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.