Alta
CVE-2026-33573
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2026-22172
OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes
Alta
CVE-2026-32918
`OpenClaw: session_status` let sandboxed subagents access parent or sibling session state
Alta
CVE-2026-32920
OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories
Alta
CVE-2026-32914
OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces
Media
CVE-2026-32973
OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths
Media
CVE-2026-32924
OpenClaw: Feishu reaction events could bypass group authorization and mention gating
Alta
CVE-2026-32972
OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes
Media
CVE-2026-33575
OpenClaw: Pairing setup codes exposed long-lived shared gateway credentials instead of short-lived bootstrap tokens
Media
CVE-2026-32975
OpenClaw's Zalouser allowlist authorization matched mutable group names by default
Crítica
CVE-2026-32621
Apollo Federation vulnerable to prototype pollution via incomplete key sanitization
Media
CVE-2026-32612
Statamic vulnerable to privilege escalation via stored cross-site scripting
Alta
ghsa-8fh9-c4jq-94h4
idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability
Alta
CVE-2026-32600
simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Alta
CVE-2026-1526
Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
Alta
CVE-2026-2229
Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
Media
CVE-2026-1527
Undici has CRLF Injection in undici via `upgrade` option
Media
CVE-2026-2581
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
Alta
CVE-2026-1528
Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
Media
CVE-2026-1525
Undici has an HTTP Request/Response Smuggling issue
Media
CVE-2026-32598
OneUptime: Password Reset Token Logged at INFO Level
Media
CVE-2026-32594
Parse Server's GraphQL WebSocket endpoint bypasses security middleware
Alta
CVE-2026-32313
xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Alta
CVE-2026-105782
Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.