Medium
CVE-2025-10281
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
CVE-2025-61920
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Low
CVE-2025-59682
Django vulnerable to partial directory traversal via archives
High
CVE-2025-59425
vLLM is vulnerable to timing attack at bearer auth
Medium
CVE-2025-8406
ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Medium
CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Medium
CVE-2025-57275
SPDK is vulnerable to buffer overflow in the NVMe-oF target component
Medium
CVE-2025-59940
mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders
Low
CVE-2025-61677
DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables
High
CVE-2025-59152
Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion
Medium
CVE-2025-8917
clearml is vulnerable to Path Traversal through its `safe_extract` function
Medium
CVE-2025-61620
vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server
High
CVE-2025-6242
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
Medium
CVE-2025-53354
NiceGUI has a Reflected XSS
High
CVE-2025-61784
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
High
CVE-2025-6985
LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
Low
CVE-2025-59842
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
Medium
CVE-2025-6051
Hugging Face Transformers library has Regular Expression Denial of Service
Medium
CVE-2025-6921
Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
Medium
CVE-2025-8869
pip's fallback tar extraction doesn't check symbolic links point to extraction directory
Medium
CVE-2025-10952
ml-logger file handler allows reading arbitrary files
Medium
CVE-2025-10951
ml-logger has path traversal in the file argument
Low
CVE-2025-10950
ml-logger deserialization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.