Alta
CVE-2025-53528
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 685
Restablecer filtros
Media
CVE-2025-53865
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).
Media
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Media
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Media
CVE-2025-71379
vLLM vulnerable to Regular Expression Denial of Service
Alta
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
Crítica
CVE-2025-47241
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Crítica
CVE-2024-6829
Aim External Control of File Name or Path vulnerability
Alta
CVE-2024-10572
H2O Vulnerable to Denial of Service (DoS) and File Write
Alta
ghsa-v432-7f47-9g94
PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash
Media
CVE-2025-29779
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
Media
CVE-2025-29780
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
Media
CVE-2025-1945
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Media
CVE-2025-1944
Zip Exploit Crashes Picklescan But Not PyTorch
Baja
CVE-2025-26622
Vyper's sqrt doesn't define rounding behavior
Baja
CVE-2025-27104
Vyper has a double eval in For List Iter
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Alta
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
Baja
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Crítica
CVE-2024-49375
Rasa Allows Remote Code Execution via Remote Model Loading
Alta
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive fu
Alta
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Media
CVE-2024-47763
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run
Media
ghsa-vx3h-qwqw-r2wq
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.