High
CVE-2026-27903
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2026-27904
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Medium
CVE-2026-27837
dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()
High
CVE-2026-27818
TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist
High
CVE-2026-27148
Storybook Dev Server is Vulnerable to WebSocket Hijacking
Medium
CVE-2026-27795
LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
Critical
CVE-2026-27739
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Medium
CVE-2026-27738
Angular SSR has an Open Redirect via X-Forwarded-Prefix
High
CVE-2026-27606
Rollup 4 has Arbitrary File Write via Path Traversal
Critical
CVE-2026-27699
Basic FTP has Path Traversal Vulnerability in its downloadToDir() method
Medium
CVE-2026-27729
Astro has memory exhaustion DoS due to missing request body size limit in Server Actions
High
CVE-2026-27578
n8n Vulnerable to Stored XSS via Various Nodes
Critical
CVE-2026-27498
n8n has Arbitrary Command Execution via File Write and Git Operations
Critical
CVE-2026-27495
n8n has a Sandbox Escape in its JavaScript Task Runner
High
CVE-2026-27494
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
Critical
CVE-2026-27493
n8n has Unauthenticated Expression Evaluation via Form Node
High
CVE-2026-27609
Parse Dashboard is Missing CSRF Protection for its Agent Endpoint
Critical
CVE-2026-27608
Parse Dashboard is Missing Authorization for its Agent Endpoint
Critical
CVE-2026-27702
Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)
Critical
CVE-2026-27595
Parse Dashboard has incomplete authentication on AI Agent endpoint
Low
CVE-2026-22866
ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation
Medium
CVE-2026-27829
Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize
Critical
CVE-2026-27728
OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
High
CVE-2026-27700
Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.