Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
Open WebUI stored cross-site scripting (XSS) vulnerability
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read
Gradio Vulnerable to Open Redirect
Aim allows denial of service due to no timeouts for some tracking server endpoints
Aim Improper Access Control
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Open WebUI Allows Viewing of Admin Details
Gunicorn HTTP Request/Response Smuggling vulnerability
Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability
Open WebUI Vulnerable to a Session Fixation Attack
Aim vulnerable to Cross-Site Request Forgery
Aim Path Traversal vulnerability
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
Open WebUI Uncontrolled Resource Consumption vulnerability
Flask-CORS allows for inconsistent CORS matching
Flask-CORS improper regex path matching vulnerability
Flask-CORS vulnerable to Improper Handling of Case Sensitivity
LoLLMS Code Injection vulnerability
LiteLLM Vulnerable to Remote Code Execution (RCE)
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
imaginAIry Denial of Service (DoS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.