Media
CVE-2026-49459
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 112
Restablecer filtros
Media
CVE-2026-47676
Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths
Media
CVE-2026-47674
Hono: IP Restriction bypasses static deny rules for non-canonical IPv6
Media
CVE-2026-47675
Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection
Media
CVE-2026-47673
Hono: JWT middleware accepts any Authorization scheme, not only Bearer
Media
CVE-2026-44646
LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()`
Baja
CVE-2026-46549
NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation
Baja
CVE-2026-44582
Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting
Media
CVE-2026-44576
Next.js vulnerable to cache poisoning in React Server Component responses
Alta
CVE-2026-44574
Next.js has a Middleware / Proxy bypass through dynamic route parameter injection
Media
CVE-2026-44458
Hono has CSS Declaration Injection via Style Object Values in JSX SSR
Baja
CVE-2026-44459
Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()
Media
CVE-2026-44457
Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage
Media
CVE-2026-44456
Hono: bodyLimit() can be bypassed for chunked / unknown-length requests
Media
CVE-2026-44455
hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection
Media
CVE-2026-44373
Nitro has a proxy scope bypass via percent-encoded path traversal in `routeRules`
Alta
CVE-2026-42043
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
Alta
CVE-2026-42349
Clerk has an authorization bypass when combining organization, billing, or reverification checks
Media
CVE-2026-42438
OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure
Media
CVE-2026-43567
OpenClaw: screen_record outPath bypassed workspace-only filesystem guard
Media
CVE-2026-56761
hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR
Media
CVE-2026-39410
Hono: Non-breaking space prefix bypass in cookie name handling in getCookie()
Media
CVE-2026-39409
Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses
Media
CVE-2026-56762
Hono missing validation of cookie name on write path in setCookie()
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.