Alta
CVE-2026-45134
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.861
Restablecer filtros
Media
CVE-2026-44223
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
Crítica
CVE-2026-31236
llm CLI tool contains a code injection vulnerability via `--functions` command-line argument
Crítica
CVE-2026-31235
imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module
Crítica
CVE-2026-31237
Ludwig framework is vulnerable to insecure deserialization through its predict() method.
Crítica
CVE-2026-31239
mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub
Crítica
CVE-2026-31238
Ludwig framework is vulnerable to insecure deserialization in its model serving component
Crítica
CVE-2026-31234
Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
Alta
CVE-2026-31221
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
Crítica
CVE-2026-31220
PySyft server-side arbitrary Python execution after code approval
Crítica
CVE-2025-65719
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page
Alta
CVE-2026-43891
changedetection.io has an Arbitrary Local File Read via a crafted backup restore
Alta
CVE-2026-41895
changedetection.io project has an XXE vulnerability
Alta
CVE-2026-2614
MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem
Alta
CVE-2026-2393
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter w
Alta
CVE-2026-42860
edx-enterprise has SSRF via SAML metadata URL in sync_provider_data endpoint
Alta
CVE-2026-42315
PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data
Media
CVE-2026-42314
PyLoad Vulnerable to Path Traversal via Package Folder Name
Alta
CVE-2026-42313
pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)
Media
CVE-2026-42312
pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)
Media
CVE-2026-44201
Wagtail has improper restriction handling on Documents and Images API
Media
CVE-2026-44200
Wagtail has improper permission handling when copying pages
Media
CVE-2026-44199
Wagtail has improper permission handling when deleting form submissions
Media
CVE-2026-44198
Wagtail has improper permission handling when viewing page history
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.