High
CVE-2026-26209
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 223
Reset filters
Low
CVE-2026-32722
Stored XSS in Memray-generated HTML reports via unescaped command-line metadata
High
CVE-2026-32981
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file
High
CVE-2026-32597
PyJWT accepts unknown `crit` header extensions
Medium
CVE-2026-28231
pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read
Medium
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Medium
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Medium
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Medium
CVE-2025-62608
MLX has heap-buffer-overflow in load()
Medium
CVE-2025-46722
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
High
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Medium
CVE-2025-1979
ray vulnerable to Insertion of Sensitive Information into Log File
Low
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Low
CVE-2025-27104
Vyper has a double eval in For List Iter
Medium
CVE-2024-55456
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Medium
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Low
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Low
CVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
High
CVE-2024-8947
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
High
CVE-2023-33976
TensorFlow has segfault in array_ops.upper_bound
Critical
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
High
CVE-2024-27758
RPyC's missing security check results in code execution when using numpy.array on the server-side.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.