Crítica
CVE-2025-14009
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 685
Restablecer filtros
Alta
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Media
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Media
CVE-2026-24098
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users
Crítica
CVE-2026-40035
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
Alta
CVE-2024-58340
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
Media
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Media
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Media
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Baja
CVE-2025-63396
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do
Alta
CVE-2025-57106
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing
Alta
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Baja
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Crítica
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Alta
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
Alta
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Crítica
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Media
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Media
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Media
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
Alta
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Baja
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Media
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Alta
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.