Media
CVE-2026-41408
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Media
CVE-2026-41375
OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels
Alta
CVE-2026-34148
Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution
Baja
CVE-2026-34781
Electron: Crash in clipboard.readImage() on malformed clipboard image data
Media
CVE-2026-34765
Electron: Named window.open targets not scoped to the opener's browsing context
Media
CVE-2026-34425
OpenClaw's complex interpreter pipelines could skip exec script preflight validation
Media
CVE-2026-39365
Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling
Alta
CVE-2026-39364
Vite: `server.fs.deny` bypassed with queries
Alta
CVE-2026-39363
Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket
Media
CVE-2026-35515
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
Baja
CVE-2026-5602
@nor2/heim-mcp vulnerable to command injection
Baja
CVE-2026-5603
@elgentos/magento2-dev-mcp vulnerable to command injection
Alta
CVE-2026-34511
OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter
Alta
CVE-2026-35209
defu: Prototype pollution via `__proto__` key in defaults argument
Alta
CVE-2026-35442
Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries
Alta
ghsa-6q22-g298-grjh
Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver
Media
CVE-2026-35441
Directus: GraphQL Alias Amplification Denial of Service Due to Missing Query Cost/Complexity Limits
Media
CVE-2026-39943
Directus: Sensitive fields exposed in revision history
Alta
CVE-2026-35412
Directus: TUS Upload Authorization Bypass Allows Arbitrary File Overwrite
Alta
CVE-2026-35409
Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import
Media
CVE-2026-35413
Directus: GraphQL Schema SDL Disclosure Setting
Media
CVE-2026-35410
Directus: Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow
Media
CVE-2026-35411
Directus: Open Redirect in Admin 2FA Setup Page
Alta
CVE-2026-39942
Directus: Path Traversal and Broken Access Control in File Management API
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.