Media
CVE-2026-1664
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.624
Restablecer filtros
Alta
CVE-2026-24884
Compressing Vulnerable to Arbitrary File Write via Symlink Extraction
Alta
CVE-2026-25157
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Media
CVE-2026-25228
SignalK Server has Path Traversal leading to information disclosure
Alta
CVE-2026-24737
jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution
Alta
CVE-2026-25128
fast-xml-parser has RangeError DoS Numeric Entities Bug
Baja
CVE-2026-25050
Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy
Media
CVE-2026-24888
Maker.js has Unsafe Property Copying in makerjs.extendObject
Media
CVE-2026-24766
NocoDB has Prototype Pollution in Connection Test Endpoint, Leading to DoS
Media
CVE-2026-24767
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
Media
CVE-2026-24768
NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter
Alta
CVE-2026-24842
node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
Media
CVE-2026-24909
vlt Mishandles Path Sanitization for tar
Media
CVE-2026-24134
StudioCMS has Authorization Bypass Through User-Controlled Key
Media
CVE-2026-24131
pnpm has Path Traversal via arbitrary file permission modification
Media
CVE-2026-23888
pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
Media
CVE-2026-23889
pnpm has Windows-specific tarball Path Traversal
Media
CVE-2026-23890
pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin
Media
CVE-2026-24056
pnpm has symlink traversal in file:/git dependencies
Alta
CVE-2026-24046
Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Alta
ghsa-h3hw-29fv-2x75
@envelop/graphql-modules has a Race Condition vulnerability
Alta
CVE-2026-23950
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
Media
CVE-2026-21852
Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
Baja
CVE-2026-23522
Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.