Media
CVE-2026-44214
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 561
Restablecer filtros
Media
ghsa-qhh4-458h-xwh2
@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
Media
CVE-2026-8026
Flowise: Bcrypt Password Hash Exposure
Alta
CVE-2026-43893
exiftool-vendored vulnerable to argument injection via newline characters in tag names
Alta
CVE-2026-42856
Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls
Media
CVE-2026-42037
Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream
Alta
CVE-2026-42353
i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters
Media
CVE-2026-42227
n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure
Media
CVE-2026-42233
n8n has SQL Injection in Oracle Database Node via Limit Field
Media
CVE-2026-42237
n8n has SQL Injection in Snowflake and MySQL Nodes
Alta
CVE-2026-79743
MCPHub has Path Traversal via Malicious MCPB Manifest Name
Alta
CVE-2026-41886
locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor
Media
CVE-2026-41885
i18next-locize-backend has URL Injection via Unsanitized Path Parameters
Media
CVE-2026-41591
Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping
Alta
CVE-2026-41693
i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite
Media
CVE-2026-41692
i18nextify has DOM XSS via javascript:/data: URL schemes in translated href/src attributes
Media
CVE-2026-41691
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns
Alta
CVE-2026-41690
i18next-http-middleware: Prototype pollution and path traversal via user-controlled language and namespace parameters
Media
CVE-2026-43574
OpenClaw: Empty approver lists could grant explicit approval authorization
Alta
CVE-2026-43584
OpenClaw: Exec environment denylist missed high-risk interpreter startup variables
Crítica
CVE-2026-41478
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)
Alta
ghsa-xfqj-r5qw-8g4j
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode
Alta
CVE-2026-41423
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Alta
CVE-2026-41276
Flowise: resetPassword Authentication Bypass Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.