Medium
CVE-2026-41483
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 529
Reset filters
Medium
CVE-2026-41310
OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure
Medium
CVE-2026-41173
OpenTelemetry.Sampler.AWS & OpenTelemetry.Resources.AWS have unbounded HTTP response body reads
Medium
CVE-2026-40894
OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers
Medium
CVE-2026-40891
OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling
Medium
CVE-2026-40182
OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies
Critical
CVE-2026-40372
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
Medium
CVE-2026-41511
OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle
Medium
CVE-2026-41319
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade
Medium
CVE-2026-41078
OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
Low
ghsa-h39g-6x3c-7fq9
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
High
ghsa-f5v8-v6q3-q4h6
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
Critical
CVE-2026-40324
ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents
Critical
CVE-2026-32179
MsQuic has a Remote Elevation of Privilege Vulnerability
Low
ghsa-fcpv-w245-r2q7
DotNetNuke.Core security code analysis rules triggered
Low
CVE-2026-56365
ImageMagick has a memory leak in PNG encoder when writing a MNG image
High
CVE-2026-26171
Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability
High
CVE-2026-33116
Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Low
CVE-2026-32178
Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
Medium
CVE-2026-33900
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
Medium
CVE-2026-40021
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
High
ghsa-32wq-ppwg-3w4m
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
High
ghsa-mvm6-f9r3-fgfx
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
Low
CVE-2026-56366
ImageMagick: META reader memory leak in the APP1JPEG input path
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.