Crítica
CVE-2026-23515
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 919
Restablecer filtros
Alta
CVE-2026-25128
fast-xml-parser has RangeError DoS Numeric Entities Bug
Crítica
CVE-2026-25047
deepHas vulnerable to Prototype Pollution via constructor.prototype
Alta
CVE-2026-24769
NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload
Media
CVE-2025-59472
Next.js has Unbounded Memory Consumption via PPR Resume Endpoint
Crítica
CVE-2026-23830
SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
Alta
CVE-2026-24132
Orval Mock Generation Code Injection via const
Alta
CVE-2026-23745
node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
Alta
CVE-2026-22803
@sveltejs/kit has memory amplification DoS vulnerability in Remote Functions binary form deserializer (application/x-sveltekit-formdata)
Baja
CVE-2026-24001
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
Alta
CVE-2026-22814
Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
Crítica
CVE-2026-22813
Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Media
CVE-2026-76228
Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`
Alta
CVE-2026-22704
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
Alta
CVE-2026-22610
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
Alta
CVE-2026-22028
Preact has JSON VNode Injection issue
Alta
CVE-2025-69263
pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies
Alta
CVE-2025-65110
Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope
Media
CVE-2025-69203
Signal K Server Vulnerable to Access Request Spoofing
Alta
CVE-2025-68272
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
Crítica
CVE-2025-66398
Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)
Media
ghsa-g9jg-w8vm-g96v
Trix has a stored XSS vulnerability through its attachment attribute
Media
CVE-2025-69206
hemmelig allows SSRF Filter bypass via Secret Request functionality
Alta
CVE-2025-61914
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.