High
CVE-2022-42906
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filters
High
CVE-2026-55514
vLLM denial of service via prompt embeds on M-RoPE models
Critical
CVE-2026-57571
Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE
High
CVE-2026-54059
Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
Medium
CVE-2022-31153
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
High
CVE-2017-17051
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
Medium
CVE-2007-0902
MoinMoin Insertion of Sensitive Information into Log File
High
CVE-2026-8147
MLflow: trace API endpoints lack proper authorization validators
Critical
CVE-2026-53753
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
Critical
CVE-2026-47393
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default
Critical
CVE-2026-42601
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
Critical
CVE-2025-15036
MLFlow path traversal vulnerability
Critical
CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Critical
CVE-2025-68664
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Critical
CVE-2025-54381
BentoML SSRF Vulnerability in File Upload Processing
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Critical
CVE-2024-8769
Aim path traversal in LockManager.release_locks
Medium
ghsa-75mw-h36v-2jv7
Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers
Critical
CVE-2026-48797
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
Medium
CVE-2026-44018
Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend
High
CVE-2026-44017
Docling: Unsafe Zip Extraction in EasyOCR Model Download
Critical
CVE-2026-56260
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
Critical
ghsa-qxvg-h7q2-hcxh
motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)
High
CVE-2026-54317
Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.