Low
CVE-2026-21889
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,415
Medium
CVE-2026-22798
hermes's raw options logging may disclose secrets passed in via subcommand options argument
High
CVE-2026-22870
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
High
CVE-2026-22871
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Medium
CVE-2026-22779
BlackSheep's ClientSession is vulnerable to CRLF injection
High
CVE-2026-21226
Azure Core is vulnerable to deserialization of untrusted data
High
CVE-2026-22777
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
Low
CVE-2025-68492
Chainlit contains an authorization bypass vulnerability
High
CVE-2026-22033
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
Medium
CVE-2026-22701
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
High
CVE-2026-23949
jaraco.context Has a Path Traversal Vulnerability
High
CVE-2026-23535
Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command
Medium
CVE-2026-22251
Weblate wlc has insecure API key configuration
Low
CVE-2026-22250
Weblate command-line client susceptible to SSL verification skip
Medium
CVE-2026-21860
Werkzeug safe_join() allows Windows special device names with compound extensions
Low
CVE-2026-22691
pypdf has possible long runtimes for malformed startxref
High
CVE-2026-22609
Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist
High
CVE-2026-22606
Fickling has a bypass via runpy.run_path() and runpy.run_module()
High
CVE-2026-22607
Fickling Blocklist Bypass: cProfile.run()
High
CVE-2026-22608
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
High
CVE-2026-22612
Fickling vulnerable to detection bypass due to "builtins" blindness
Low
CVE-2025-15506
AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability
Medium
CVE-2026-21872
NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links
High
CVE-2026-21873
NiceGUI apps which use `ui.sub_pages` vulnerable to zero-click XSS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.