Media
CVE-2026-34231
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 422
Restablecer filtros
Alta
CVE-2026-33744
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
Alta
CVE-2026-33718
OpenHands is Vulnerable to Command Injection through its Git Diff Handler
Alta
CVE-2026-5389
JustHTML is vulnerable to XSS via code fence breakout in <pre> content
Alta
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Alta
CVE-2026-32875
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop
Crítica
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Alta
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Alta
CVE-2026-32611
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Alta
CVE-2026-30922
Denial of Service in pyasn1 via Unbounded Recursion
Alta
CVE-2026-28498
Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
Crítica
CVE-2026-32633
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
Media
ghsa-r48f-3986-4f9c
fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist
Alta
CVE-2026-105782
Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware
Crítica
CVE-2026-27825
MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
Media
CVE-2026-29038
changedetection.io has Reflected XSS in its RSS Tag Error Response
Media
CVE-2026-28348
lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes
Alta
CVE-2026-28416
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
Media
CVE-2026-27809
psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps
Media
CVE-2026-27645
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
Alta
ghsa-mxhj-88fx-4pcv
Fickling: OBJ opcode call invisibility bypasses all safety checks
Media
CVE-2026-27156
NiceGUI vulnerable to XSS via Code Injection during client-side element function execution
Media
CVE-2026-25516
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content
Alta
CVE-2026-25640
Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.