Baja
ghsa-7ww3-xvf5-cxwm
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 230
Restablecer filtros
Media
CVE-2026-42086
OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender
Media
CVE-2026-41182
LangSmith SDK: Streaming token events bypass output redaction
Media
CVE-2026-34755
vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Alta
CVE-2026-33533
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Alta
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink
Alta
CVE-2026-33718
OpenHands is Vulnerable to Command Injection through its Git Diff Handler
Alta
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Baja
CVE-2026-32722
Stored XSS in Memray-generated HTML reports via unescaped command-line metadata
Alta
CVE-2026-32981
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file
Alta
CVE-2026-32597
PyJWT accepts unknown `crit` header extensions
Media
CVE-2026-28231
pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read
Media
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Media
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Media
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Media
CVE-2025-62608
MLX has heap-buffer-overflow in load()
Media
CVE-2025-46722
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
Alta
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Media
CVE-2025-1979
ray vulnerable to Insertion of Sensitive Information into Log File
Baja
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Baja
CVE-2025-27104
Vyper has a double eval in For List Iter
Media
CVE-2024-55456
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Media
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.