Alta
CVE-2026-32727
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 692
Restablecer filtros
Crítica
ghsa-955r-262c-33jc
Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2
Crítica
CVE-2026-0558
A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the `/api/files/extract-text` endpoint. This endpoint does not e
Media
ghsa-7fqq-q52p-2jjg
OpenCC has an Out-of-bounds read when processing truncated UTF-8 input
Crítica
CVE-2026-33873
Langflow has Authenticated Code Execution in Agentic Assistant Validation
Media
CVE-2026-25645
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Alta
CVE-2026-5389
JustHTML is vulnerable to XSS via code fence breakout in <pre> content
Crítica
CVE-2026-33309
Langflow has an Arbitrary File Write (RCE) via v2 API
Alta
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Alta
CVE-2026-27953
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
Alta
ghsa-2mhw-8qcg-gr96
skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
Baja
CVE-2026-32722
Stored XSS in Memray-generated HTML reports via unescaped command-line metadata
Alta
CVE-2026-32596
Glances exposes the REST API without authentication
Alta
CVE-2026-30922
Denial of Service in pyasn1 via Unbounded Recursion
Crítica
Explotada en ataques
CVE-2026-33017
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
Alta
CVE-2026-28490
Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Crítica
CVE-2026-27962
Authlib JWS JWK Header Injection: Signature Verification Bypass
Media
ghsa-5cxw-w2xg-2m8h
fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`
Alta
CVE-2026-21887
OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature
Alta
CVE-2026-30928
Glances Exposes Unauthenticated Configuration Secrets
Alta
CVE-2026-30930
Glances has SQL Injection via Process Names in TimescaleDB Export
Media
CVE-2026-29780
eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write
Alta
ghsa-qr2g-p6q7-w82m
x402 SDK Security Advisory
Alta
CVE-2026-29065
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.