Alta
CVE-2026-32917
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2026-32980
OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion
Alta
CVE-2026-32987
OpenClaw bootstrap setup codes could be replayed to escalate pending pairing scopes before approval
Media
CVE-2026-32982
OpenClaw Telegram media fetch errors exposed bot tokens in logged file URLs
Alta
CVE-2026-32728
Parse Server has a stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries
Media
CVE-2026-32723
SandboxJS has an execution-quota bypass (cross-sandbox currentTicks race) in SandboxJS timers
Baja
CVE-2026-32732
XSS in @leanprover/unicode-input-component
Baja
CVE-2026-32638
StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens
Alta
CVE-2026-29112
Uncontrolled memory allocation via crafted SVG dimensions in @dicebear/converter
Media
CVE-2026-32774
Vulnogram contains a stored cross-site scripting vulnerability in comment hypertext handling
Alta
CVE-2026-4092
@google/clasp vulnerable to unsafe path traversal cloning or pulling a malicious script
Alta
CVE-2026-32635
Angular vulnerable to XSS in i18n attribute bindings
Media
CVE-2026-32630
file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry
Media
CVE-2026-34505
OpenClaw: Zalo webhook rate limiting could be bypassed before secret validation
Alta
CVE-2026-32974
OpenClaw: Feishu webhook mode accepted forged events when only `verificationToken` was configured
Alta
CVE-2026-33573
OpenClaw: Gateway `agent` calls could override the workspace boundary
Crítica
CVE-2026-22172
OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes
Alta
CVE-2026-32918
`OpenClaw: session_status` let sandboxed subagents access parent or sibling session state
Alta
CVE-2026-32920
OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories
Alta
CVE-2026-32914
OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces
Media
CVE-2026-32973
OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths
Media
CVE-2026-32924
OpenClaw: Feishu reaction events could bypass group authorization and mention gating
Alta
CVE-2026-32972
OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes
Media
CVE-2026-33575
OpenClaw: Pairing setup codes exposed long-lived shared gateway credentials instead of short-lived bootstrap tokens
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.