Media
CVE-2026-48784
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2026-48760
Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense
Media
CVE-2026-48747
Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade
Media
CVE-2026-48736
Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient
Alta
CVE-2026-48712
protobufjs: Denial of service through unbounded Any expansion during JSON conversion
Alta
CVE-2026-48489
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes
Media
CVE-2026-54269
protobufjs : Schema-derived names can shadow runtime-significant properties
Alta
CVE-2026-12143
form-data: CRLF injection in form-data via unescaped multipart field names and filenames
Alta
CVE-2026-54264
@angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker
Alta
CVE-2026-54268
@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)
Alta
CVE-2026-54266
@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning
Media
CVE-2026-54265
@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)
Media
CVE-2026-50557
Angular: Template and Attribute Namespace Sanitization Bypass (XSS)
Alta
CVE-2026-50556
@angular/platform-server: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR
Alta
CVE-2026-50555
@angular/platform-server: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Media
CVE-2026-53655
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
Media
CVE-2026-53632
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
Alta
CVE-2026-53571
vite: `server.fs.deny` bypass on Windows alternate paths
Media
CVE-2026-5149
RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter
Media
CVE-2026-53550
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
Baja
CVE-2026-49356
@babel/core: Arbitrary File Read via sourceMappingURL Comment
Media
CVE-2026-50184
@angular/service-worker: Request Credential & Cache Policy Stripping
Media
CVE-2026-15284
King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter
Alta
CVE-2026-8443
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.