Alta
CVE-2026-25153
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.032
Restablecer filtros
Crítica
CVE-2026-25142
SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE
Media
CVE-2026-24040
jsPDF has Shared State Race Condition in addJS Plugin
Crítica
CVE-2026-23515
Signal K set-system-time plugin vulnerable to RCE - Command Injection
Media
CVE-2026-23835
LobeHub Vulnerable to Improper Authorization in Presigned Upload
Crítica
CVE-2026-25141
Orval has Code Injection via unsanitized x-enum-descriptions using JS comments
Alta
CVE-2026-25128
fast-xml-parser has RangeError DoS Numeric Entities Bug
Baja
CVE-2026-25050
Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy
Crítica
CVE-2026-25047
deepHas vulnerable to Prototype Pollution via constructor.prototype
Media
CVE-2026-24888
Maker.js has Unsafe Property Copying in makerjs.extendObject
Media
CVE-2026-24766
NocoDB has Prototype Pollution in Connection Test Endpoint, Leading to DoS
Media
CVE-2026-24767
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
Media
CVE-2026-24768
NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter
Alta
CVE-2026-24769
NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload
Media
CVE-2025-57283
BrowserStack Local vulnerable to Command Injection through logfile variable
Alta
CVE-2026-24842
node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
Alta
CVE-2026-24778
Ghost vulnerable to XSS via malicious Portal preview links
Media
CVE-2026-24771
Hono vulnerable to XSS through ErrorBoundary component
Alta
ghsa-h25m-26qc-wcjf
Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components
Media
CVE-2025-59472
Next.js has Unbounded Memory Consumption via PPR Resume Endpoint
Media
CVE-2026-24134
StudioCMS has Authorization Bypass Through User-Controlled Key
Crítica
CVE-2026-23830
SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
Media
CVE-2025-59471
Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration
Media
CVE-2026-24473
Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.