Medium
CVE-2025-71176
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2026-24049
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
Low
CVE-2026-23996
FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection
High
CVE-2026-23842
ChatterBot Vulnerable to Denial of Service via Database Connection Pool Exhaustion
High
CVE-2026-22219
Chainlit contain a server-side request forgery (SSRF) vulnerability
Medium
CVE-2026-23968
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
High
CVE-2026-22807
vLLM affected by RCE via auto_map dynamic module loading during model initialization
Low
CVE-2026-24130
Moonraker affected by LDAP search filter injection
Medium
CVE-2026-23986
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
Medium
CVE-2026-23833
ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
High
CVE-2026-24009
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
High
CVE-2025-68616
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Medium
CVE-2026-22702
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
High
CVE-2025-14279
MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation
Low
CVE-2026-21889
Weblate leaks information via screenshots
Medium
CVE-2026-22798
hermes's raw options logging may disclose secrets passed in via subcommand options argument
High
CVE-2026-22870
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
High
CVE-2026-22871
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Medium
CVE-2026-22779
BlackSheep's ClientSession is vulnerable to CRLF injection
High
CVE-2026-21226
Azure Core is vulnerable to deserialization of untrusted data
High
CVE-2026-22777
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
Low
CVE-2025-68492
Chainlit contains an authorization bypass vulnerability
High
CVE-2026-22033
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
Medium
CVE-2026-22701
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.