Media
CVE-2026-75597
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 58
Restablecer filtros
Alta
CVE-2026-104851
fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
Crítica
CVE-2026-114107
Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF
Alta
CVE-2026-57170
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
Crítica
CVE-2026-37004
LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
Alta
CVE-2026-54757
Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
Alta
CVE-2026-53964
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Alta
ghsa-vwf3-4xxj-qg6h
mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment
Alta
CVE-2026-54654
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
Alta
CVE-2026-54655
`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator
Alta
CVE-2026-54656
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
Alta
CVE-2026-54621
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description
Alta
CVE-2026-48060
Litestar has HTML Injection Through its CSRF Token
Alta
CVE-2026-46439
compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)
Alta
CVE-2026-44209
banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI
Media
CVE-2026-40602
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates
Media
CVE-2026-40320
Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck
Alta
CVE-2026-39891
PraisonAI has Template Injection in Agent Tool Definitions
Media
CVE-2026-40112
PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)
Alta
CVE-2026-34172
Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment
Baja
CVE-2026-2969
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
Alta
CVE-2025-65106
LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
Baja
CVE-2025-6518
pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function
Media
CVE-2025-48944
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.