Alta
CVE-2026-42553
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Alta
CVE-2025-63705
node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js
Crítica
CVE-2025-63706
next-npm-version is vulnerable to Command injection
Media
CVE-2026-44263
Weblate Vulnerable to Private Translation Enumeration via Screenshot API
Media
CVE-2026-44264
Weblate vulnerable to XSS via crafted Markdown
Media
CVE-2026-41654
Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url
Media
CVE-2026-41519
Weblate Doesn't Invalidate API Token on Password Change
Media
CVE-2026-41004
Spring Cloud Config Server Logged Sensitive Information
Alta
CVE-2026-41002
Spring Cloud Config Server Susceptible To TOCTOU Attack
Crítica
CVE-2026-40982
Spring Cloud Config vulnerable to Path Traversal
Alta
CVE-2026-40981
Spring Cloud Config has an Authorization Bypass Through User-Controlled Key
Media
CVE-2026-44248
Netty MQTT: Resource exhaustion in MqttDecoder
Crítica
CVE-2026-44007
vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
Alta
CVE-2026-43998
vm2 has a NodeVM require.root bypass via symlink traversal that allows sandbox escape
Media
CVE-2026-44003
vm2's Transformer Fast-Path Bypass Exposes Internal State Variable
Media
CVE-2026-44002
vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak
Media
CVE-2026-44000
vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary
Alta
CVE-2026-44004
vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion
Alta
CVE-2026-44001
vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
Crítica
CVE-2026-43999
vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape
Crítica
CVE-2026-44005
vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape
Crítica
CVE-2026-43997
vm2 Access to Host Object Enables Sandbox Escape
Crítica
CVE-2026-44006
vm2 has a Sandbox Escape Vulnerability
Alta
CVE-2026-44503
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.