Media
CVE-2026-67321
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 94
Restablecer filtros
Media
CVE-2026-67319
Axios: Nested axios option objects can consume polluted prototype values
Media
CVE-2026-67318
Axios: HTTP/2 streamed uploads bypass `maxBodyLength`
Media
CVE-2026-67317
Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`
Media
CVE-2026-67316
Axios: Prototype pollution gadgets can alter axios request construction
Media
CVE-2026-67315
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios
Media
CVE-2026-67313
Axios: Excessive recursion in formDataToJSON can cause denial of service
Media
CVE-2026-67314
Axios: Prototype pollution auth subfields can inject Basic auth
Media
CVE-2026-67312
Axios: Deep formToJSON Key Recursion Can Cause Denial of Service
Alta
CVE-2026-55388
piscina: Prototype Pollution Gadget → RCE via inherited options.filename
Media
CVE-2026-53931
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
Media
CVE-2026-53927
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
Alta
CVE-2026-47719
FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading
Alta
CVE-2026-44496
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
Alta
CVE-2026-44488
Allocation of Resources Without Limits or Throttling in Axios
Alta
CVE-2026-44487
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
Alta
CVE-2026-44486
Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
Alta
CVE-2026-44495
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Alta
CVE-2026-44494
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
Alta
CVE-2026-44492
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
Media
CVE-2026-44490
axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions
Baja
CVE-2026-44489
Axios has a Patch Bypass: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix
Baja
CVE-2026-46553
NocoDB: Attachment Size Limit Bypass via Upload-by-URL
Media
CVE-2026-46548
NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.