High
CVE-2026-42203
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
Exploited in attacks
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
Medium
CVE-2026-7149
kaggle-mcp has a Path Traversal issue
Medium
CVE-2026-6550
AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache
High
CVE-2026-33626
LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading
Medium
CVE-2025-66335
Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization
Medium
CVE-2026-6606
AgentScope vulnerable to Server-Side Request Forgery
Low
CVE-2026-6587
RAGAS has SSRF via Multi-Modal Faithfulness Collections Module
Medium
CVE-2026-6604
AgentScope vulnerable to Server-Side Request Forgery
Medium
CVE-2026-6605
AgentScope vulnerable to Server-Side Request Forgery
High
CVE-2026-41490
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
Low
CVE-2026-35402
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures
High
CVE-2026-40474
wger has Broken Access Control in Global Gym Configuration Update Endpoint
Low
CVE-2026-6111
MetaGPT affected by server-side request forgery in metagpt/utils/common.py
Medium
CVE-2026-40315
PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
Medium
CVE-2026-40159
PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution
High
CVE-2026-40114
PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
Medium
CVE-2026-40152
PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary
High
CVE-2026-40150
PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
Medium
CVE-2026-40151
PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS
Medium
CVE-2026-40148
PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits
High
CVE-2026-40149
PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls
Medium
CVE-2026-40115
PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS
High
CVE-2026-40156
PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.