Alta
CVE-2026-70608
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.482
Restablecer filtros
Media
CVE-2026-70607
Electron: window.open features string controls some window options considered privileged
Media
CVE-2026-70606
Electron: ProtocolResponse.url reuses the default session cache instead of the registering session
Media
CVE-2026-70605
Electron: HTTP redirect followed into local file loader
Alta
CVE-2026-70604
Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads
Media
CVE-2026-70602
Electron: Extension tab APIs operate across session boundaries
Media
CVE-2026-70603
Electron: shell.openPath path validation bypass via embedded null byte
Alta
CVE-2026-70601
Electron: Context isolation bypass via Function.prototype.bind hijack
Baja
CVE-2026-70600
Electron: Cross-origin iframe can position native autofill popup
Media
CVE-2026-70599
Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
Baja
CVE-2026-70598
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
Media
CVE-2026-70597
Electron: Parent process code-sign check is spoofable
Media
CVE-2026-53949
Ghost Content API filter bypass reveals private fields
Media
CVE-2026-70596
Ghost: Cross-Site Scripting in Feature Image Captions
Media
CVE-2026-70595
Ghost: Server-Side Request Forgery Mitigation Issue
Media
CVE-2026-59817
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Media
CVE-2026-53947
Ghost: Member existence leak via magic link sign-in response
Alta
CVE-2026-53950
XSS in Ghost's ActivityPub client
Media
CVE-2026-70594
Ghost: Session Fixation in Ghost Admin
Media
CVE-2026-70593
Ghost: Theme Upload Path Traversal
Media
CVE-2026-70592
Ghost: Database Backup Path Traversal
Media
CVE-2026-70591
Ghost: Server-Side Request Forgery in Image Fetching
Media
CVE-2026-70590
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Media
CVE-2026-53946
Ghost: Mobiledoc image-size fetch SSRF
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.