High
CVE-2025-54365
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
CVE-2025-6998
Calibre Web and Autocaliweb have a ReDoS vulnerability
Medium
CVE-2025-7404
Calibre Web and Autocaliweb have OS Command Injection vulnerability
Medium
CVE-2025-55013
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Low
CVE-2025-53643
AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
Medium
CVE-2025-51464
Aim vulnerable to Cross-site Scripting
Medium
CVE-2025-6211
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
Medium
CVE-2025-3933
Transformers is vulnerable to ReDoS attack through its DonutProcessor class
High
CVE-2025-7346
pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages
Medium
CVE-2025-53539
fastapi-guard is vulnerable to ReDoS through inefficient regex
Medium
CVE-2023-51232
Dagster vulnerable to Path Traversal attack through its /logs endpoint
Medium
CVE-2025-53640
Indico vulnerability allows attackers to bulk dump user details
Medium
CVE-2025-29606
py-libp2p is vulnerable to DoS attacks through use of large RSA keys
Low
CVE-2025-3777
Transformers's Improper Input Validation vulnerability can be exploited through username injection
Medium
CVE-2025-3263
Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
Medium
CVE-2025-3264
Transformers vulnerable to ReDoS attack through its get_imports() function
Medium
CVE-2025-3262
Transformers vulnerable to ReDoS attack through its SETTING_RE variable
Low
CVE-2025-6855
Langchain-Chatchat vulnerable to path traversal
Low
CVE-2025-6854
Langchain-Chatchat vulnerable to path traversal
High
CVE-2025-53365
MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service
High
CVE-2025-53366
MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS
High
CVE-2025-6386
Lord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function
Medium
CVE-2025-50182
urllib3 does not control redirects in browsers and Node.js
Medium
CVE-2025-22237
Salt's on demand pillar functionality vulnerable to arbitrary command injections
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.