Media
CVE-2026-29038
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 692
Restablecer filtros
Alta
CVE-2026-30244
Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure
Crítica
CVE-2026-53873
PickleScan's profile.run blocklist mismatch allows exec() bypass
Baja
CVE-2026-27167
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
Crítica
CVE-2026-27614
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Media
CVE-2026-27645
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
Crítica
CVE-2026-26198
ormar is vulnerable to SQL Injection through aggregate functions min() and max()
Crítica
CVE-2025-14009
NLTK has a Zip Slip Vulnerability
Alta
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Media
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Media
CVE-2026-24098
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users
Crítica
CVE-2026-40035
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
Alta
CVE-2024-58340
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
Media
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Media
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Media
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Baja
CVE-2025-63396
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do
Alta
CVE-2025-57106
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing
Alta
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Baja
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Crítica
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Alta
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
Alta
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Crítica
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.