Medium
CVE-2025-54368
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,343
Reset filters
Medium
CVE-2025-53009
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
Medium
CVE-2025-48072
OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute
Medium
CVE-2025-48073
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
Low
CVE-2025-53011
MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput
Low
CVE-2025-53010
MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return
Medium
CVE-2025-54121
Starlette has possible denial-of-service vector when parsing large files in multipart forms
High
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Medium
CVE-2023-51232
Dagster vulnerable to Path Traversal attack through its /logs endpoint
Low
CVE-2025-3777
Transformers's Improper Input Validation vulnerability can be exploited through username injection
High
CVE-2025-53365
MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service
High
CVE-2025-53366
MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS
Medium
CVE-2025-22242
Salt's worker process vulnerable to denial of service through file read operation
High
CVE-2025-53002
LLaMA-Factory allows Code Injection through improper vhead_file safeguards
Medium
CVE-2025-48944
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
Medium
CVE-2025-48994
SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
High
CVE-2025-30165
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Low
CVE-2025-47774
Vyper's `slice()` may elide side-effects when output length is 0
High
CVE-2025-30370
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
High
CVE-2024-32982
Litestar and Starlite vulnerable to Path Traversal
Medium
CVE-2024-6577
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
High
CVE-2024-12215
Kedro allows Remote Code Execution by Pulling Micro Packages
High
CVE-2024-12216
GluonCV Arbitrary File Write via TarSlip
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.