Baja
CVE-2026-46497
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 116
Restablecer filtros
Media
CVE-2026-46556
FlaskBB: SSRF in get_image_info() via unrestricted avatar URL
Alta
CVE-2026-45400
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
Alta
CVE-2026-45331
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature
Media
CVE-2026-45299
Open WebUI has Stored Cross-Site Scripting In Profile Picture
Media
CVE-2026-43979
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)
Media
CVE-2026-44337
PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries
Media
CVE-2026-44520
docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
Media
CVE-2026-41206
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code
Alta
CVE-2026-40114
PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
Alta
CVE-2026-40116
PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits
Media
CVE-2026-34753
vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url `
Alta
CVE-2026-40072
web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling
Media
CVE-2026-34052
LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)
Alta
CVE-2025-15381
MLFlow allows Tracing + Assessments Access
Alta
CVE-2026-33139
PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution
Alta
ghsa-h4g2-xfmw-q2c9
Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
Media
ghsa-f66q-9rf6-8795
Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion
Media
CVE-2025-67743
Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
Alta
CVE-2025-68477
Langflow vulnerable to Server-Side Request Forgery
Alta
CVE-2025-60787
motionEye vulnerable to RCE via unsanitized motion config parameter
Media
CVE-2026-53878
Django: DomainNameValidator permits newline characters that may enable HTTP header injection
Media
CVE-2024-43371
Potential access to sensitive URLs via CKAN extensions (SSRF)
Media
CVE-2023-45813
TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.