Media
CVE-2026-24472
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.032
Restablecer filtros
Media
CVE-2026-24398
Hono IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing
Crítica
CVE-2026-1470
n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution
Crítica
ghsa-cr3w-cw5w-h3fj
Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE
Media
CVE-2026-24131
pnpm has Path Traversal via arbitrary file permission modification
Media
CVE-2026-23888
pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
Media
CVE-2026-23889
pnpm has Windows-specific tarball Path Traversal
Media
CVE-2026-23890
pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin
Media
CVE-2026-24056
pnpm has symlink traversal in file:/git dependencies
Crítica
CVE-2026-22709
vm2 has a Sandbox Escape
Crítica
CVE-2026-22696
dcap-qvl has Missing Verification for QE Identity
Alta
CVE-2026-24132
Orval Mock Generation Code Injection via const
Alta
CVE-2025-65098
Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass
Media
CVE-2025-13465
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
Media
CVE-2026-24047
@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass
Alta
CVE-2026-24046
Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Alta
ghsa-h3hw-29fv-2x75
@envelop/graphql-modules has a Race Condition vulnerability
Alta
CVE-2026-23965
sm-crypto Affected by Signature Forgery in SM2-DSA
Alta
CVE-2026-23967
sm-crypto Affected by Signature Malleability in SM2-DSA
Crítica
CVE-2026-23966
sm-crypto Affected by Private Key Recovery in SM2-PKE
Alta
CVE-2026-23950
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
Media
CVE-2026-21852
Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
Baja
CVE-2025-66803
Turbo Frame responses can restore stale session cookies
Crítica
CVE-2026-23733
Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.