Crítica
CVE-2026-25751
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Crítica
CVE-2026-25893
FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
Media
CVE-2026-25631
n8n's domain allowlist bypass enables credential exfiltration
Crítica
CVE-2026-25630
survey-pdf Upgraded jsPDF Version Due to Security Vulnerability
Alta
CVE-2026-25593
OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply
Alta
CVE-2026-25536
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Alta
CVE-2026-25546
godot-mcp has Command Injection via unsanitized projectPath
Crítica
CVE-2026-25115
n8n has a Python sandbox escape
Crítica
CVE-2026-25056
n8n Merge Node has Arbitrary File Write leading to RCE
Alta
CVE-2026-25055
n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH Node
Alta
CVE-2026-25054
n8n Has Stored Cross-site Scripting via Markdown Rendering in Workflow UI
Media
CVE-2026-25475
OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction
Crítica
CVE-2026-25053
n8n has OS Command Injection in Git Node
Crítica
CVE-2026-25052
n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
Alta
CVE-2026-25051
n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
Crítica
CVE-2026-25049
n8n Has Expression Escape Vulnerability Leading to RCE
Alta
CVE-2026-23897
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`
Crítica
CVE-2026-21893
n8n Vulnerable to Command Injection in Community Package Installation
Alta
CVE-2025-61917
n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner
Media
CVE-2026-25155
Qwik City CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)
Baja
CVE-2026-25149
Qwik City Open Redirect via fixTrailingSlash
Media
CVE-2026-25151
Qwik City has a CSRF Protection Bypass via Content-Type Header Validation
Crítica
CVE-2026-25150
Prototype Pollution via FormData Processing in Qwik City
Media
CVE-2026-25148
Qwik SSR XSS via Unsafe Virtual Node Serialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.