Alta
ghsa-qr2g-p6q7-w82m
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 764
Restablecer filtros
Alta
CVE-2026-30822
Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint
Baja
CVE-2026-30830
defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag
Media
CVE-2026-56267
Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint
Alta
CVE-2026-29786
tar has Hardlink Path Traversal via Drive-Relative Linkpath
Media
ghsa-jjgj-cpp9-cvpv
OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection
Alta
CVE-2026-3690
OpenClaw Canvas Authentication Bypass Vulnerability
Media
ghsa-8cp7-rp8r-mg77
OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP
Media
ghsa-cjv3-m589-v3rx
OpenClaw has Canvas route hardening for mixed-trust deployments
Alta
ghsa-jxrq-8fm4-9p58
OpenClaw: Zip extraction symlink traversal could write outside destination
Media
ghsa-ff98-w8hj-qrxf
OpenClaw plugin runtime command execution is part of trusted plugin boundary
Media
CVE-2026-32008
OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files
Media
CVE-2026-32044
OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS)
Alta
CVE-2026-32004
OpenClaw has encoded-path auth bypass in plugin `/api/channels` route classification
Alta
CVE-2026-27670
OpenClaw: ZIP extraction race could write outside destination via parent symlink rebind
Media
CVE-2026-28398
NocoDB Vulnerable to Stored Cross-Site Scripting via Comments and Rich Text Cells
Media
CVE-2026-32023
OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode
Media
ghsa-h656-5vcf-cm23
OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check
Alta
CVE-2026-32003
OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE)
Media
CVE-2026-28486
OpenClaw vulnerable to path traversal (Zip Slip) in archive extraction during explicit installation commands
Alta
CVE-2026-28453
OpenClaw has Zip Slip path traversal in tar archive extraction
Baja
CVE-2026-32058
OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows
Alta
CVE-2026-3689
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability
Media
CVE-2026-32054
OpenClaw has browser trace/download path symlink escape in temp output handling
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.