Baja
CVE-2026-45028
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 92
Restablecer filtros
Baja
CVE-2026-44589
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
Alta
CVE-2026-42349
Clerk has an authorization bypass when combining organization, billing, or reverification checks
Baja
CVE-2026-41321
Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)
Media
CVE-2026-41322
Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed
Media
CVE-2026-41067
Astro: XSS in define:vars via incomplete </script> tag sanitization
Alta
CVE-2026-39320
Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths
Crítica
CVE-2026-41248
Official Clerk JavaScript SDKs: Middleware-based route protection bypass
Media
CVE-2026-35041
fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification
Alta
CVE-2026-35213
@hapi/content: Regular Expression Denial of Service (ReDoS) in HTTP header parsing
Baja
CVE-2026-33769
Astro: Remote allowlist bypass via unanchored matchPathname wildcard
Media
CVE-2026-33768
Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`
Alta
CVE-2026-33671
Picomatch has a ReDoS vulnerability via extglob quantifiers
Media
CVE-2026-29772
Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands
Alta
CVE-2026-32101
StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check
Alta
CVE-2026-30925
Parse Server has Regular Expression Denial of Service (ReDoS) via `$regex` query in LiveQuery
Media
CVE-2026-22178
OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction
Crítica
CVE-2026-28794
`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization
Alta
CVE-2026-27904
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Media
CVE-2026-27729
Astro has memory exhaustion DoS due to missing request body size limit in Server Actions
Media
CVE-2026-27829
Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize
Media
CVE-2026-25545
Astro has Full-Read SSRF in error rendering via Host: header injection
Media
CVE-2025-69873
ajv has ReDoS when using `$data` option
Alta
CVE-2026-23956
seroval affected by Denial of Service via RegExp serialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.