High
CVE-2026-42403
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2026-7500
Keycloak has a Forced Browsing issue
High
ghsa-h8cj-hpmg-636v
appsmith has SQL Injection in FilterDataService via Unsafe DROP TABLE Execution
Critical
CVE-2026-41586
fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE
Medium
CVE-2026-42521
Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors
Low
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
Medium
CVE-2026-22740
Spring Framework DoS with Multipart Temp Files in WebFlux
Low
CVE-2026-7303
xxl-job has a Resource Injection issue
Medium
CVE-2026-40968
Spring gRPC SecurityContext leaks across requests upon authorization failure
Low
CVE-2026-40969
Spring gRPC AuthenticationException messages are reflected to remote client
Medium
CVE-2026-40966
Spring AI's VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration
High
CVE-2026-40978
Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()
Medium
CVE-2026-40980
Spring AI Vulnerable to OOM by attacker-controlled PDF
Medium
CVE-2026-40979
Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory
High
CVE-2026-40967
Spring AI has a VectorStore FilterExpression Converter injection
High
CVE-2026-40973
Spring Boot accepts predictable temp directory without ownership verification
Critical
CVE-2026-40976
Spring Boot's default security filter chain has no authorization rule with Actuator but without Health
Medium
CVE-2026-41081
Apache Storm's Improper Handling of TLS Client Authentication Failure Leads to Anonymous Principal Assignment
Medium
CVE-2026-40557
Apache Storm Prometheus Reporter vulnerable to Improper Certificate Validation via Global SSL Context Downgrade
Critical
CVE-2026-33454
Apache Camel's Camel-Mail component is vulnerable to Camel message header injection
High
CVE-2026-40022
Apache Camel Vulnerable to Authentication Bypass Using an Alternate Path or Channel
High
CVE-2026-40858
Apache Camel-Infinispan Component Vulnerable to Deserialization of Untrusted Data
Medium
CVE-2026-27172
Apache Camel-Consul component vulnerable to Deserialization of Untrusted Data
Critical
CVE-2026-41635
Apache MINA vulnerable to Deserialization of Untrusted Data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.