Medium
CVE-2025-59376
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2025-55178
Llama Stack could potentially allow for remote code execution
High
CVE-2025-59420
Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
High
CVE-2025-7647
llama-index-core insecurely handles temporary files
High
CVE-2025-11059
xml2rfc is vulnerable to arbitrary file reads through prepped files
Medium
CVE-2025-6638
Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
Medium
CVE-2025-10164
SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor
High
CVE-2025-59042
PyInstaller has local privilege escalation vulnerability
Medium
CVE-2025-59034
Indico may disclose unauthorized user details access via legacy API
Medium
CVE-2025-58065
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Medium
CVE-2025-58753
copyparty: Sharing a single file does not fully restrict access to other files in source folder
Medium
CVE-2025-59035
Indico vulnerable to Cross-Site Scripting via LaTeX math code
Medium
CVE-2025-59036
Infrahub: Deleted and expired API tokens can still authenticate
High
CVE-2025-10193
Neo4j Cypher MCP server is vulnerable to DNS rebinding
High
CVE-2025-57817
Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
High
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
Medium
CVE-2025-58446
xgrammar vulnerable to denial of service by huge enum grammar
High
CVE-2025-55671
TkEasyGUI Affected by Uncontrolled Search Path Element Issue
Low
CVE-2025-58352
Weblate has a long session expiry when verifying second factor
High
CVE-2025-9636
pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
Low
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
High
CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Low
CVE-2025-57766
Fides' Admin UI User Password Change Does Not Invalidate Current Session
Medium
CVE-2025-57816
Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.