Alta
CVE-2026-30945
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 236
Restablecer filtros
Alta
CVE-2026-31802
node-tar Symlink Path Traversal via Drive-Relative Linkpath
Media
CVE-2026-30959
OneUptime has WhatsApp Resend Verification Authorization Bypass
Media
ghsa-9q2p-vc84-2rwm
OpenClaw: system.run allow-always persistence included shell-commented payload tails
Alta
CVE-2026-29786
tar has Hardlink Path Traversal via Drive-Relative Linkpath
Alta
CVE-2026-29186
TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
Alta
CVE-2026-29074
SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)
Media
ghsa-jjgj-cpp9-cvpv
OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection
Alta
CVE-2026-27970
Angular i18n vulnerable to Cross-Site Scripting
Alta
CVE-2026-27903
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
Alta
CVE-2026-27904
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Alta
CVE-2026-27148
Storybook Dev Server is Vulnerable to WebSocket Hijacking
Crítica
CVE-2026-27739
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Media
CVE-2026-27829
Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize
Crítica
CVE-2026-27728
OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
Media
CVE-2026-25545
Astro has Full-Read SSRF in error rendering via Host: header injection
Alta
CVE-2026-26318
Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation
Alta
CVE-2026-28448
OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline
Media
CVE-2026-28471
OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching
Alta
CVE-2026-26316
OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust
Media
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Alta
CVE-2026-25723
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
Media
CVE-2026-25533
Sandbox escape via infinite recursion and error objects
Alta
CVE-2026-25153
@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.