Alta
CVE-2026-25547
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2026-24887
Claude Code has a Command Injection in find Command Bypasses User Approval Prompt
Alta
CVE-2026-24053
Claude Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
Alta
CVE-2026-24052
Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains
Media
CVE-2026-1664
Cloudflare Agents SDK has Insecure Direct Object Reference (IDOR) via Header-Based Email Routing
Alta
CVE-2025-69983
FUXA allows Remote Code Execution (RCE) via the project import functionality.
Alta
CVE-2025-69981
FUXA contains an Unrestricted File Upload vulnerability
Alta
CVE-2025-69970
FUXA contains an insecure default configuration vulnerability
Alta
CVE-2026-24884
Compressing Vulnerable to Arbitrary File Write via Symlink Extraction
Alta
CVE-2026-25157
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Alta
CVE-2026-25253
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl
Alta
CVE-2026-24763
OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable
Media
CVE-2026-25228
SignalK Server has Path Traversal leading to information disclosure
Baja
CVE-2026-25224
Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream
Alta
CVE-2026-25223
Fastify's Content-Type header tab character allows body validation bypass
Crítica
CVE-2026-25521
locutus is vulnerable to Prototype Pollution
Alta
CVE-2026-25153
@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks
Crítica
CVE-2026-25142
SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE
Alta
CVE-2026-24737
jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution
Alta
CVE-2026-24133
jsPDF Vulnerable to Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder
Media
CVE-2026-24043
jsPDF Vulnerable to Stored XMP Metadata Injection (Spoofing & Integrity Violation)
Media
CVE-2026-24040
jsPDF has Shared State Race Condition in addJS Plugin
Crítica
CVE-2026-23515
Signal K set-system-time plugin vulnerable to RCE - Command Injection
Media
CVE-2026-25152
@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.