Alta
CVE-2026-48109
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Alta
CVE-2025-27511
GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
Media
CVE-2026-48067
Filament has inconsistent scope enforcement for its AttachAction and AssociateAction Select fields
Alta
CVE-2026-48059
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
Media
CVE-2026-11986
Keycloak Admin UI REST Extensions: bulk role-removal endpoints fail to perform granular permission checks
Crítica
CVE-2026-48062
CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
Media
CVE-2026-48049
@hapi/inert has a static-file confinement bypass via sibling-prefix path
Alta
CVE-2026-11816
Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filt
Media
CVE-2026-48043
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
Media
CVE-2026-48040
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
Alta
CVE-2026-48068
@grpc/grpc-js: A malformed request can cause a server crash
Alta
CVE-2026-48069
@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
Media
CVE-2026-48038
joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas
Alta
CVE-2026-48054
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
Media
CVE-2026-48022
@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects
Alta
CVE-2026-48007
Element Call reports full URLs of visited pages to analytics server
Alta
CVE-2026-48006
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
Media
CVE-2026-53723
guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator
Media
CVE-2026-48998
guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
Media
CVE-2026-49214
guzzlehttp/psr7 has CRLF Injection via URI Host Component
Media
CVE-2026-9125
The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute
Alta
CVE-2026-5497
vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processin
Media
CVE-2026-41001
Spring Boot: Predictable Temp Directory in Artemis Auto-configuration
Alta
CVE-2026-41856
Spring for GraphQL: Annotation Detection Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.