Media
CVE-2026-113721
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.825
Restablecer filtros
Media
CVE-2026-113790
pypdf: Possible large memory usage when parsing arrays and dictionaries
Media
CVE-2026-113791
pypdf: Possible large memory usage when parsing content streams
Media
CVE-2026-113789
pypdf: Possible long runtimes/large memory usage when retrieving form fields
Media
CVE-2026-114603
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
Media
CVE-2026-96636
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
Media
CVE-2026-96641
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Media
CVE-2026-96638
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
Media
CVE-2026-112396
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Media
CVE-2026-113724
virtualenv: Deletion recovery can change a symlink target's mode
Media
CVE-2026-113716
virtualenv: Builtin creation follows linked environment directories
Media
CVE-2026-112391
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Media
CVE-2026-112898
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Media
CVE-2026-112401
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
Media
CVE-2026-112901
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Baja
CVE-2026-113786
pypdf: Unvalidated JPEG image data loading
Baja
CVE-2026-113731
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
Media
CVE-2026-112899
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
Media
CVE-2026-111059
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
Media
CVE-2026-104250
unstructured: Stored XSS via unescaped HTML generation
Media
CVE-2026-104102
copyparty FTP: upload outside defined volumes (limited path traversal)
Media
CVE-2026-59951
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion
Media
CVE-2026-62268
borg extract might modify out-of-tree files when extracting maliciously crafted archives
Media
CVE-2026-62322
Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.