Alta
ghsa-mvm6-f9r3-fgfx
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Crítica
CVE-2026-33873
Langflow has Authenticated Code Execution in Agentic Assistant Validation
Media
CVE-2026-2442
Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'
Alta
ghsa-443w-3rq3-5m5h
AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities
Media
CVE-2026-65914
DOMPurify is vulnerable to mutation-XSS via Re-Contextualization
Alta
CVE-2026-34076
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Alta
ghsa-27qh-8cxx-2cr5
AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters
Alta
CVE-2026-34046
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Alta
CVE-2026-33989
@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools
Alta
CVE-2026-33942
Saloon has insecure deserialization in AccessTokenAuthenticator
Alta
CVE-2026-28369
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-28368
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-28367
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-33941
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Alta
CVE-2026-33940
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Alta
CVE-2026-33939
Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
Alta
CVE-2026-33938
Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
Crítica
CVE-2026-33937
Handlebars.js has JavaScript Injection via AST Type Confusion
Media
CVE-2026-34043
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
Media
CVE-2026-1307
Ninja Forms <= 3.14.1 - Authenticated (Contributor+) Sensitive Information Disclosure via Block Editor Token
Media
CVE-2026-56359
n8n has XSS in its Credential Management Flow
Media
CVE-2026-56356
n8n has XSS in Chat Trigger Node through Custom CSS
Media
CVE-2026-56354
n8n: Authenticated XSS and Open Redirect via Form Node
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.