Medium
CVE-2026-41425
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 58
Reset filters
High
ghsa-x462-jjpc-q4q4
PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint
Critical
Exploited in attacks
CVE-2026-39987
Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
Medium
CVE-2026-32632
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
High
CVE-2026-32610
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Low
CVE-2026-27167
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
High
ghsa-w466-2wfc-8g58
Open WebUI has vulnerable dependency on starlette via fastapi
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Medium
CVE-2023-29159
Starlette has Path Traversal vulnerability in StaticFiles
High
CVE-2023-30798
MultipartParser denial of service with too many fields or files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.