Media
CVE-2026-70599
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.012
Restablecer filtros
Baja
CVE-2026-70598
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
Media
CVE-2026-70597
Electron: Parent process code-sign check is spoofable
Media
CVE-2026-53949
Ghost Content API filter bypass reveals private fields
Media
CVE-2026-70596
Ghost: Cross-Site Scripting in Feature Image Captions
Media
CVE-2026-70595
Ghost: Server-Side Request Forgery Mitigation Issue
Media
CVE-2026-59817
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Media
CVE-2026-53947
Ghost: Member existence leak via magic link sign-in response
Alta
CVE-2026-53950
XSS in Ghost's ActivityPub client
Media
CVE-2026-70594
Ghost: Session Fixation in Ghost Admin
Media
CVE-2026-70593
Ghost: Theme Upload Path Traversal
Media
CVE-2026-70592
Ghost: Database Backup Path Traversal
Media
CVE-2026-70591
Ghost: Server-Side Request Forgery in Image Fetching
Media
CVE-2026-70590
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Media
CVE-2026-53946
Ghost: Mobiledoc image-size fetch SSRF
Media
CVE-2026-53945
Ghost: Server-side request forgery via DNS rebinding in external request handling
Media
CVE-2026-53944
Ghost: Private IP filtering bypass to make server-side requests to internal services
Media
CVE-2026-70589
Ghost: Archived Offers can be Redeemed
Media
CVE-2026-53948
Ghost: File Upload Content-Type Spoofing
Media
CVE-2026-70588
Ghost: Cross-Site Scripting in Universal Import
Crítica
CVE-2026-70478
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
Crítica
CVE-2026-70477
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Alta
CVE-2026-70476
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Media
CVE-2026-73603
Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.