Alta
CVE-2026-41845
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2026-41842
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
Media
CVE-2026-41844
Spring Framework Open Redirect in Spring MVC and WebFlux
Media
CVE-2026-41843
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
Media
CVE-2026-41839
Spring Framework Escalation via Session Fixation in WebFlux
Media
CVE-2026-41715
Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
Media
CVE-2026-41710
Spring Retry has Cache Exhaustion in Stateful Retries that leads to Denial of Service
Media
CVE-2026-41838
Spring Framework Predictable Session ID in WebSocket Module
Alta
CVE-2026-41007
Spring HATEOAS heap exhaustion through unbounded internal caching
Alta
CVE-2026-41006
Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration
Alta
CVE-2026-40983
Micrometer gRPC server instrumentation DoS
Alta
CVE-2026-40984
Micrometer HTTP server instrumentations DoS
Alta
CVE-2026-47691
Netty has Insufficient Bailiwick Validation for NS Records
Media
CVE-2026-47244
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
Alta
CVE-2026-46340
Netty: SCTP reassembly nests buffers without bound
Alta
CVE-2026-45674
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Media
CVE-2026-45673
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
Media
CVE-2026-45536
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
Alta
CVE-2026-45416
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Alta
CVE-2026-44894
Netty's Default QUIC token handler accepts any client-supplied token
Alta
CVE-2026-44893
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
Alta
CVE-2026-44892
Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
Alta
CVE-2026-44890
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
Alta
CVE-2026-44250
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.