Alta
CVE-2026-65015
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.476
Restablecer filtros
Media
CVE-2026-73565
Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake
Media
CVE-2026-73651
TypeORM: migration:generate template-literal code injection
Alta
CVE-2026-73650
SVGO removeScripts plugin leaves some executable scripts intact
Baja
CVE-2026-66010
DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.
Crítica
CVE-2026-73653
@vitest/browser: Browser Mode provider commands bypass the file-access permission gate
Alta
CVE-2026-59879
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
Media
CVE-2026-59896
hono/jsx does not isolate context per request, leading to cross-request data disclosure
Media
CVE-2026-59895
Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility
Media
ghsa-frvp-7c67-39w9
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
Media
CVE-2026-73424
Astro: Unauthenticated path override in the @astrojs/vercel ISR function
Baja
CVE-2026-59730
@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect
Media
CVE-2026-59729
Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
Media
CVE-2026-59728
@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Baja
CVE-2026-59727
Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands
Alta
CVE-2026-67320
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
Media
CVE-2026-67321
Axios form serializer maxDepth bypass via {} metatoken
Media
CVE-2026-67319
Axios: Nested axios option objects can consume polluted prototype values
Media
CVE-2026-67318
Axios: HTTP/2 streamed uploads bypass `maxBodyLength`
Media
CVE-2026-67317
Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`
Media
CVE-2026-67316
Axios: Prototype pollution gadgets can alter axios request construction
Media
CVE-2026-67315
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios
Media
CVE-2026-14631
webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
Media
CVE-2026-14620
webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.