Alta
CVE-2026-32014
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 919
Restablecer filtros
Alta
CVE-2026-32049
OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels
Media
CVE-2026-22175
OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c)
Media
ghsa-6x2m-hqfw-hvpj
OpenClaw: Node exec approvals could be replayed across nodes
Media
CVE-2026-29607
OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution
Baja
CVE-2026-31993
OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains
Crítica
CVE-2026-28794
`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization
Alta
CVE-2026-28787
OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay
Media
CVE-2026-56360
n8n has Webhook Forgery on Zendesk Trigger Node
Alta
CVE-2026-27148
Storybook Dev Server is Vulnerable to WebSocket Hijacking
Media
CVE-2026-27729
Astro has memory exhaustion DoS due to missing request body size limit in Server Actions
Crítica
CVE-2026-27702
Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)
Crítica
CVE-2026-27728
OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
Media
CVE-2026-27567
Payload: Server-Side Request Forgery (SSRF) in External File URL Uploads
Media
CVE-2026-27576
OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs
Media
CVE-2025-67438
Sync-in Server has a stored cross-site scripting (XSS) vulnerability
Crítica
CVE-2026-27212
Prototype pollution in swiper
Alta
CVE-2026-28479
OpenClaw replaced a deprecated sandbox hash algorithm
Alta
CVE-2026-25755
jsPDF has a PDF Object Injection via Unsanitized Input in addJS Method
Alta
CVE-2026-25535
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
Alta
CVE-2026-27013
Fabric.js Affected by Stored XSS via SVG Export
Alta
CVE-2026-27487
OpenClaw: Prevent shell injection in macOS keychain credential write
Alta
CVE-2026-28478
OpenClaw affected by denial of service via unbounded webhook request body buffering
Media
CVE-2026-29612
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.