Alta
CVE-2026-44209
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 452
Restablecer filtros
Alta
CVE-2026-44555
Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining
Alta
CVE-2026-44556
Open WebUI's responses passthrough endpoint lacks access control authorization
Alta
CVE-2026-44334
PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)
Media
CVE-2026-44520
docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
Alta
CVE-2026-44307
Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
Baja
CVE-2026-44220
ciguard: discover_pipeline_files follows symlinks out of scan root
Alta
CVE-2026-42301
pyp2spec is Vulnerable to Code Injection
Media
CVE-2026-6357
pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
Media
CVE-2026-3219
pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
Alta
CVE-2026-41490
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
Baja
CVE-2026-40319
Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check
Media
CVE-2026-40159
PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution
Alta
CVE-2026-40160
PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback
Alta
CVE-2026-40158
PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure
Alta
CVE-2026-40156
PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading
Alta
CVE-2026-40153
PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
Alta
CVE-2026-40113
PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars
Media
CVE-2026-40112
PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)
Media
CVE-2026-33753
rfc3161-client Has Improper Certificate Validation
Alta
CVE-2026-34544
OpenEXR: integer overflow to OOB write in uncompress_b44_impl()
Alta
CVE-2026-34954
PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
Alta
CVE-2026-34955
PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox
Alta
CVE-2026-34936
PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.