Crítica
CVE-2026-34938
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.359
Restablecer filtros
Media
CVE-2026-34531
Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client
Baja
CVE-2026-34519
AIOHTTP has HTTP response splitting via \r in reason phrase
Baja
CVE-2026-34518
AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
Media
CVE-2026-34525
AIOHTTP accepts duplicate Host headers
Baja
CVE-2026-34520
AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
Media
CVE-2026-34515
AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows
Media
CVE-2026-34516
AIOHTTP has a Multipart Header Size Bypass
Baja
CVE-2026-34513
AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
Baja
CVE-2026-34514
AIOHTTP has CRLF injection through multipart part content type header construction
Baja
CVE-2026-34517
AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
Media
CVE-2026-22815
aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage
Media
ghsa-qc22-xmq4-qg46
c2cciutils affected by CVE-2022-40896
Sin evaluar
CVE-2026-35000
ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPat
Media
CVE-2026-34446
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
Alta
CVE-2026-34445
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
Media
CVE-2026-34447
ONNX: External Data Symlink Traversal
Alta
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink
Crítica
CVE-2026-32714
SciTokens is vulnerable to SQL Injection in KeyCache
Media
CVE-2026-34450
Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool
Baja
CVE-2026-34203
Nautobot: Management of users via REST API does not apply configured password validators
Media
CVE-2026-34231
Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag
Crítica
CVE-2026-0596
Mlflow: Command Injection when serving models with enable_mlserver=True
Baja
CVE-2026-34073
cryptography has incomplete DNS name constraint enforcement on peer names
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.