Unrated
pysec-2026-611
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,364
Reset filters
Medium
CVE-2026-54262
Wagtail: Pages translations can be created without page permissions when using simple_translation
Medium
CVE-2026-54260
Wagtail: Denial of service via unbounded filter specs in the image preview
Medium
CVE-2026-54261
Wagtail: Improper permission handling in image preview
Medium
CVE-2026-54259
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
High
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Unrated
pysec-2026-610
Malicious code in ufish (PyPI)
High
CVE-2026-49119
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
Unrated
pysec-2026-609
Malicious code in synago (PyPI)
Unrated
pysec-2026-608
Malicious code in pantheon-toolsets (PyPI)
Unrated
pysec-2026-607
Malicious code in pantheon-agents (PyPI)
Unrated
pysec-2026-606
Malicious code in okite (PyPI)
Unrated
pysec-2026-605
Malicious code in nucbox (PyPI)
Unrated
pysec-2026-604
Malicious code in napari-ufish (PyPI)
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Unrated
pysec-2026-594
Malicious code in mrbios (PyPI)
Unrated
pysec-2026-593
Malicious code in magique-ai (PyPI)
Unrated
pysec-2026-592
Malicious code in magique (PyPI)
Unrated
pysec-2026-591
Malicious code in funcdesc (PyPI)
Unrated
pysec-2026-590
Malicious code in executor-http (PyPI)
Unrated
pysec-2026-589
Malicious code in executor-engine (PyPI)
High
CVE-2026-58168
DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Unrated
pysec-2026-580
Malicious code in coolbox (PyPI)
Unrated
pysec-2026-579
Malicious code in cmd2func (PyPI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.