Alta
CVE-2026-92708
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 25
Restablecer filtros
Media
ghsa-hx4r-w6wj-j8fg
devalue: Residual sparse-array CPU amplification in uneval
Alta
ghsa-mcm9-63f2-9j32
devalue: Repeated primitive strings cause quadratic expansion in uneval
Baja
ghsa-wf3x-273g-mvxv
devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated
Alta
ghsa-r9w8-h9r3-54w4
devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation
Alta
ghsa-x5rw-q4pp-hg5g
devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise
Media
ghsa-4q55-j62x-fr9h
devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion
Media
CVE-2026-81176
Svelte devalue: DoS via malformed input
Alta
CVE-2026-83613
xmldom: Quadratic-time attribute deduplication
Baja
CVE-2026-65900
DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes
Media
CVE-2026-8723
qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set
Alta
CVE-2026-42570
Svelte devalue: DoS via sparse array deserialization
Alta
CVE-2026-41675
xmldom has XML node injection through unvalidated processing instruction serialization
Alta
CVE-2026-106447
@stablelib/cbor: Stack exhaustion Denial of Service via deeply nested CBOR arrays, maps, or tags
Alta
CVE-2026-34601
xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion
Alta
CVE-2026-33331
oRPC has Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
Baja
ghsa-mwv9-gp5h-frr4
Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties
Media
CVE-2026-30226
devalue has prototype pollution in devalue.parse and devalue.unflatten
Baja
ghsa-33hq-fvwr-56pm
devalue affected by CPU and memory amplification from sparse arrays
Baja
ghsa-8qm3-746x-r74r
devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed
Alta
CVE-2026-22775
devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse
Alta
CVE-2026-22774
Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse
Baja
CVE-2025-59414
Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
Alta
CVE-2025-57820
devalue prototype pollution vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.