Media
CVE-2026-32975
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Crítica
CVE-2026-32621
Apollo Federation vulnerable to prototype pollution via incomplete key sanitization
Alta
CVE-2026-1526
Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
Alta
CVE-2026-2229
Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
Media
CVE-2026-1527
Undici has CRLF Injection in undici via `upgrade` option
Media
CVE-2026-2581
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
Alta
CVE-2026-1528
Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
Media
CVE-2026-1525
Undici has an HTTP Request/Response Smuggling issue
Media
CVE-2026-32598
OneUptime: Password Reset Token Logged at INFO Level
Media
CVE-2026-32594
Parse Server's GraphQL WebSocket endpoint bypasses security middleware
Media
CVE-2026-32269
Parse Server OAuth2 adapter app ID validation sends wrong token to introspection endpoint
Alta
CVE-2026-32308
OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose")
Crítica
CVE-2026-32306
OneUptime ClickHouse SQL Injection via Aggregate Query Parameters
Media
CVE-2026-32923
OpenClaw: Discord guild reaction ingress could bypass users and roles allowlists
Crítica
CVE-2026-32304
Locutus vulnerable to RCE via unsanitized input in create_function()
Baja
CVE-2026-32970
OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode
Alta
CVE-2026-32988
OpenClaw: Sandbox staged writes could escape the verified parent directory before commit
Media
CVE-2026-32919
OpenClaw: Write-scoped callers could reach admin-only session reset logic through `agent`
Alta
CVE-2026-32978
OpenClaw: Unrecognized script runners could bypass `system.run` approval integrity
Media
CVE-2026-32976
OpenClaw: Channel commands could bypass account-scoped `configWrites` restrictions
Alta
CVE-2026-32971
OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv
Alta
CVE-2026-32979
OpenClaw: Unbound interpreter and runtime commands could bypass node-host approval integrity
Alta
CVE-2026-32915
OpenClaw: Leaf subagents could steer sibling sessions across sandbox boundaries
Crítica
CVE-2026-32922
OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.