Medium
CVE-2026-44226
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Medium
CVE-2026-44222
vLLM Vulnerable to Remote DoS via Special-Token Placeholders
Low
CVE-2026-44218
ciguard: Container image runs as root (no USER directive)
Low
CVE-2026-44220
ciguard: discover_pipeline_files follows symlinks out of scan root
High
CVE-2026-33079
Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input
Medium
CVE-2026-42303
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Medium
CVE-2026-43901
wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
High
CVE-2026-42079
PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope
Medium
CVE-2026-42080
PPTAgent: Arbitrary File Write via `save_generated_slides`
Medium
CVE-2026-42175
requests-hardened is Vulnerable to Server-Side Request Forgery
Low
CVE-2026-7847
Langchain-Chatchat Uses Insufficiently Random Values
Medium
CVE-2026-42310
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
Low
CVE-2026-7845
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
Low
CVE-2026-7846
Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
Low
CVE-2026-7597
mem0ai mem0 has an Improper Input Validation Issue
Medium
CVE-2026-7711
MindsDB has an Improper Access Control Issue
High
CVE-2026-42352
pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber
High
CVE-2026-42351
pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider
Medium
CVE-2026-7404
mcpo-simple-server has a Path Traversal issue
Medium
CVE-2026-41255
CKAN has CSRF exemption primed by anonymous requests
High
CVE-2026-42031
CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`
Medium
CVE-2026-42032
CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`
Medium
CVE-2026-7158
mcp-url-downloader has a Server-Side Request Forgery issue
Medium
CVE-2026-41132
CKAN has no certificate validation on STMP connection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.