Media
ghsa-w5cr-2qhr-jqc5
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Media
CVE-2026-76227
Child processes spawned by Renovate incorrectly have full access to environment variables
Media
CVE-2026-26226
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS)
Media
CVE-2026-1721
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler
Media
CVE-2026-26185
Directus Vulnerable to User Enumeration via Password Reset Timing Attack
Media
CVE-2025-56647
@farmfe/core is Missing Origin Validation in WebSocket
Alta
CVE-2026-26063
CediPay Affected by Improper Input Validation in Payment Processing
Baja
CVE-2026-2391
qs's arrayLimit bypass in comma parsing allows denial of service
Media
CVE-2026-2327
markdown-it is has a Regular Expression Denial of Service (ReDoS)
Alta
CVE-2026-0969
next-mdx-remote affected by arbitrary code execution in React server-side rendering of untrusted MDX content
Media
CVE-2025-69873
ajv has ReDoS when using `$data` option
Media
CVE-2025-69874
nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()
Crítica
CVE-2026-26021
set-in Affected by Prototype Pollution
Media
CVE-2026-26019
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
Crítica
CVE-2026-1774
CASL Ability is Vulnerable to Prototype Pollution
Media
CVE-2026-56294
cap-go/capacitor-native-biometric Authentication Bypass
Media
CVE-2026-25957
Cube Core is vulnerable to Denial of Service (DoS) via crafted request
Alta
CVE-2026-25958
Cube Core is vulnerable to privilege escalation via a specially crafted request
Alta
CVE-2026-25951
FUXA Affected by a Path Traversal Sanitization Bypass
Crítica
CVE-2026-25939
FUXA Unauthenticated Remote Arbitrary Scheduler Write
Crítica
CVE-2026-25938
FUXA Unauthenticated Remote Code Execution in Node-RED Integration
Media
CVE-2026-25918
unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
Crítica
CVE-2026-25881
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
Media
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.