Alta
CVE-2026-81875
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.072
Restablecer filtros
Media
CVE-2026-85717
AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target
Media
CVE-2026-85720
AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT request
Alta
CVE-2026-85721
AsyncHttpClient's unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service
Baja
CVE-2026-85716
AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses
Media
CVE-2026-73245
Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth
Alta
CVE-2026-73247
Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
Baja
CVE-2026-86071
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root
Baja
CVE-2026-61700
MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests
Alta
CVE-2026-63126
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
Alta
CVE-2026-75516
RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
Alta
CVE-2026-88975
Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE
Media
CVE-2026-69201
Http4s: ResourceService and Webjar Service path escape via percent-encoded separators
Alta
CVE-2026-69218
Http4s Ember HTTP/2: unbounded continuation frame accumulation
Media
CVE-2026-69216
Http4s: Ember chunk parser lenience (TE.TE request smuggling)
Media
CVE-2026-69215
Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin
Media
CVE-2026-69214
Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain
Alta
CVE-2026-69213
Http4s Ember HTTP/2 has an unbounded outbound frame queue
Alta
CVE-2026-69208
Http4s: DigestAuth nonce map grows unbounded
Media
CVE-2026-69206
Http4s: DigestAuth allows replay of captured requests
Alta
CVE-2026-69205
Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)
Crítica
CVE-2026-69204
Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)
Alta
CVE-2026-69203
Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS
Alta
CVE-2026-69202
Http4s Ember HTTP/2: unbounded inbound body buffering
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.