Alta
CVE-2026-27523
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 83
Restablecer filtros
Media
CVE-2026-32052
OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text
Alta
ghsa-9f72-qcpw-2hxc
OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs
Crítica
CVE-2026-28794
`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization
Media
CVE-2026-24131
pnpm has Path Traversal via arbitrary file permission modification
Media
CVE-2026-23888
pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
Media
CVE-2026-23889
pnpm has Windows-specific tarball Path Traversal
Media
CVE-2026-23890
pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin
Media
CVE-2026-24056
pnpm has symlink traversal in file:/git dependencies
Alta
CVE-2025-69264
pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"
Alta
CVE-2025-69263
pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies
Alta
CVE-2025-69262
pnpm vulnerable to Command Injection via environment variable substitution
Alta
CVE-2025-68155
@vitejs/plugin-rsc has an Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint
Crítica
CVE-2025-55346
Flowise vulnerable to RCE via Dynamic function constructor injection
Alta
CVE-2025-71336
Flowise has unsandboxed remote code execution via Custom MCP
Media
ghsa-qj3p-xc97-xw74
MetaMask SDK indirectly exposed via malicious debug@4.4.2 dependency
Alta
CVE-2025-58358
mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool
Crítica
CVE-2025-53620
Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests
Media
CVE-2024-47829
pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting
Crítica
CVE-2025-71338
Flowise allows arbitrary file write to RCE
Media
CVE-2024-53866
pnpm no-script global cache poisoning via overrides / `ignore-scripts` evasion
Alta
CVE-2024-23657
Nuxt Devtools has a Path Traversal: '../filedir'
Media
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
Media
CVE-2023-48309
Possible user mocking that bypasses basic authentication
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.