Media
CVE-2025-71340
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 692
Restablecer filtros
Media
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Media
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
Alta
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Baja
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Media
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Alta
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Alta
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Media
CVE-2025-53865
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).
Media
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Media
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Media
CVE-2025-71379
vLLM vulnerable to Regular Expression Denial of Service
Alta
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
Crítica
CVE-2025-47241
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Crítica
CVE-2024-6829
Aim External Control of File Name or Path vulnerability
Alta
CVE-2024-10572
H2O Vulnerable to Denial of Service (DoS) and File Write
Alta
ghsa-v432-7f47-9g94
PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash
Media
CVE-2025-29779
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
Media
CVE-2025-29780
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
Media
CVE-2025-1945
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Media
CVE-2025-1944
Zip Exploit Crashes Picklescan But Not PyTorch
Baja
CVE-2025-26622
Vyper's sqrt doesn't define rounding behavior
Baja
CVE-2025-27104
Vyper has a double eval in For List Iter
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.