Medium
CVE-2025-55149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
High
CVE-2025-54886
SKOPS Card.get_model happily allows arbitrary code execution
High
CVE-2025-55156
PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
High
CVE-2025-54796
copyparty allows Regex Denial of Service (ReDoS) in the upload listing
Medium
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Medium
CVE-2025-53009
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Medium
CVE-2025-54952
ExecuTorch integer overflow vulnerability leads to code execution
High
CVE-2025-54433
Bugsink path traversal via event_id in ingestion
Medium
CVE-2025-54423
copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata
Medium
CVE-2025-54589
copyparty Reflected XSS via Filter Parameter
Low
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
Medium
CVE-2025-48074
OpenEXR Out-Of-Memory via Unbounded File Header Values
High
CVE-2025-48071
OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size
Medium
CVE-2025-48072
OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute
Medium
CVE-2025-48073
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
Low
CVE-2025-53011
MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput
Low
CVE-2025-53010
MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return
Medium
CVE-2025-54121
Starlette has possible denial-of-service vector when parsing large files in multipart forms
High
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
High
CVE-2025-54413
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.