Media
ghsa-7f4h-6264-89fr
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 693
Restablecer filtros
Crítica
CVE-2026-43948
wger: cross-tenant password reset and plaintext disclosure via gym=None bypass
Crítica
CVE-2026-29090
Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API
Crítica
CVE-2026-29080
Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API
Media
ghsa-8pqq-224h-x875
ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key
Baja
CVE-2026-41488
langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding
Media
CVE-2026-41425
Authlib: Cross-site request forging when using cache
Media
CVE-2026-39377
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
Media
CVE-2026-30912
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false
Media
CVE-2026-40491
gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall
Media
CVE-2026-41182
LangSmith SDK: Streaming token events bypass output redaction
Media
ghsa-55v6-g8pm-pw4c
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration
Crítica
CVE-2026-40258
gramps-webapi: Zip Slip Path Traversal in Media Archive Import
Media
CVE-2026-56074
PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands
Crítica
CVE-2026-40157
PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`
Crítica
CVE-2026-39888
PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
Alta
CVE-2026-39376
FastFeedParser has an infinite redirect loop DoS via meta-refresh chain
Media
CVE-2026-35592
pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass
Crítica
CVE-2026-35490
changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
Alta
CVE-2026-35043
BentoML: Command Injection in cloud deployment setup script
Media
CVE-2026-34755
vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Media
CVE-2026-34760
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models
Alta
CVE-2026-33641
Glances Vulnerable to Command Injection via Dynamic Configuration Values
Alta
CVE-2026-33533
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.