High
CVE-2025-70559
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 452
Reset filters
High
CVE-2025-62703
Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer
High
CVE-2025-64168
Agno session state overwrites between different sessions/users
Medium
CVE-2025-61912
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Medium
CVE-2025-61783
Python Social Auth - Django has unsafe account association
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Medium
CVE-2025-8869
pip's fallback tar extraction doesn't check symbolic links point to extraction directory
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
Medium
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
High
CVE-2025-48071
OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Medium
CVE-2025-3264
Transformers vulnerable to ReDoS attack through its get_imports() function
Medium
CVE-2025-22242
Salt's worker process vulnerable to denial of service through file read operation
High
CVE-2025-48957
AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
High
CVE-2024-32982
Litestar and Starlite vulnerable to Path Traversal
Medium
CVE-2025-0508
SageMaker Workflow component allows possibility of MD5 hash collisions
High
CVE-2024-7806
Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2024-7037
open-webui allows writing and deleting arbitrary files
Medium
CVE-2024-45190
Mage AI Path Traversal vulnerability
Medium
CVE-2024-41951
PheonixAppAPI has visible Encoding Maps
High
CVE-2024-41950
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
Medium
CVE-2024-41671
twisted.web has disordered HTTP pipeline response
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.