Media
ghsa-63cx-g855-hvv4
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.359
Restablecer filtros
Alta
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Media
CVE-2025-71369
Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers
Media
CVE-2025-71350
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run
Media
CVE-2025-71356
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
Media
CVE-2025-71353
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get
Media
CVE-2025-71366
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile
Baja
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Alta
CVE-2025-8747
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
Alta
CVE-2025-45768
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may
Crítica
pysec-2025-72
num2words subjected to phishing attack, two versions published containing malware
Media
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Media
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Crítica
CVE-2025-54379
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability
Alta
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Alta
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Alta
CVE-2025-6209
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
Media
CVE-2025-5472
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
Media
CVE-2025-6210
LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit
Alta
CVE-2025-3225
LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser
Media
CVE-2025-3044
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions
Alta
CVE-2025-3046
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
Media
CVE-2025-3108
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
Alta
CVE-2025-48379
Pillow vulnerability can cause write buffer overflow on BCn encoding
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.