High
CVE-2025-62172
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 738
Reset filters
High
CVE-2025-61920
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Medium
CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Medium
CVE-2025-53354
NiceGUI has a Reflected XSS
High
CVE-2025-61784
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
High
CVE-2025-59420
Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
High
CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
High
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
High
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
High
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Medium
CVE-2025-55673
Apache Superset data query improperly discloses database schema information to low-privileged guest user
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
Low
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
High
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
High
CVE-2025-54413
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
High
CVE-2025-54365
FastAPI Guard has a regex bypass
Medium
CVE-2025-55013
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Medium
CVE-2025-53539
fastapi-guard is vulnerable to ReDoS through inefficient regex
Medium
CVE-2025-3262
Transformers vulnerable to ReDoS attack through its SETTING_RE variable
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.