Medium
CVE-2026-75526
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,825
Reset filters
High
CVE-2026-9856
Transformers save_pretrained path traversal allows arbitrary file writes through chat template names
High
CVE-2026-71211
MLflow AI Gateway permits SSRF through an unvalidated api_base
Medium
CVE-2026-55235
langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication
Medium
CVE-2026-55236
langgraph-api: Incomplete assistant authorization in LangGraph Server run creation
Medium
CVE-2026-12570
Keras model loading is vulnerable to denial of service through HDF5 shape bombs
High
CVE-2026-76219
GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite
High
CVE-2026-53964
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Medium
CVE-2026-76217
GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()
High
CVE-2026-76220
GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution
High
CVE-2026-76218
GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks
High
CVE-2026-53951
Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
Medium
CVE-2026-69112
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Critical
CVE-2026-15925
Snowflake Connector for Python improperly verifies TLS hostnames
Medium
CVE-2026-15529
PyOD persistence.load deserializes untrusted artifacts before validation
High
CVE-2026-15736
Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities
Medium
CVE-2026-56696
OpenHarness remote project-context commands allow persistent prompt poisoning
High
CVE-2026-56695
OpenHarness remote resume commands expose other users' saved session snapshots
High
CVE-2026-67322
GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
High
CVE-2026-62240
crewai-tools SSRF redirect bypass exposes internal services
High
CVE-2026-67325
GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist
High
CVE-2026-67323
GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`
Critical
CVE-2026-58473
Cognee allows non-superusers to overwrite global LLM configuration
High
CVE-2026-49114
ONNX: TOCTOU arbitrary file read/write in save_external_dat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.