Media
CVE-2026-22809
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 92
Restablecer filtros
Alta
CVE-2026-0621
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Alta
CVE-2025-68475
Fedify has ReDoS Vulnerability in HTML Parsing Regex
Media
CVE-2025-66202
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Alta
CVE-2025-66020
Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
Media
CVE-2025-65944
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Media
CVE-2025-65019
Astro Cloudflare adapter has Stored Cross-site Scripting vulnerability in /_image endpoint
Media
CVE-2025-64765
Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values
Alta
CVE-2025-64764
Astro vulnerable to reflected XSS via the server islands feature
Baja
CVE-2025-64757
Astro Development Server has Arbitrary Local File Read
Media
CVE-2025-64525
Astro vulnerable to URL manipulation via headers, leading to middleware and CVE-2025-61925 bypass
Baja
CVE-2025-64745
Astro development server error page is vulnerable to reflected Cross-site Scripting
Alta
CVE-2025-59837
Astro's bypass of image proxy domain validation leads to SSRF and potential XSS
Media
CVE-2025-61925
Astro's `X-Forwarded-Host` is reflected without validation
Alta
CVE-2025-58179
Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter
Media
CVE-2025-55303
Astro allows unauthorized third-party images in _image endpoint
Media
CVE-2025-55207
@astrojs/node's trailing slash handling causes open redirect issue
Media
CVE-2025-54793
Astros's duplicate trailing slash feature leads to an open redirection security issue
Alta
CVE-2025-53548
@clerk/backend Performs Insufficient Verification of Data Authenticity
Media
CVE-2018-25110
Marked allows Regular Expression Denial of Service (ReDoS) attacks
Media
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Media
CVE-2025-25290
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Media
CVE-2025-25289
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Media
CVE-2025-25288
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.