Media
CVE-2026-34447
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.336
Restablecer filtros
Alta
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink
Media
CVE-2026-34452
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Alta
CVE-2026-32727
SciTokens has an Authorization Bypass via Path Traversal in Scope Validation
Alta
CVE-2026-32716
SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
Crítica
ghsa-955r-262c-33jc
Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2
Alta
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Sin evaluar
pysec-2026-3
Two telnyx versions published containing credential harvesting malware
Alta
CVE-2026-27893
vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out
Media
CVE-2026-33682
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
Media
CVE-2026-25645
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Alta
CVE-2026-33497
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Alta
CVE-2026-33046
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Alta
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Alta
CVE-2026-33236
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
Alta
CVE-2026-33231
Unauthenticated remote shutdown in nltk.app.wordnet_app
Media
CVE-2026-33230
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
Alta
CVE-2026-27953
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
Alta
ghsa-2mhw-8qcg-gr96
skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
Media
CVE-2026-8445
JustHTML has a Sanitizer Bypass (in Markdown)
Crítica
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Crítica
CVE-2026-33054
Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
Alta
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Media
CVE-2026-32632
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.