Baja
ghsa-g27f-9qjv-22pm
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 564
Restablecer filtros
Alta
CVE-2026-28391
OpenClaw's Windows cmd.exe parsing may bypass exec allowlist/approval gating
Media
ghsa-w5cr-2qhr-jqc5
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site
Media
CVE-2026-26226
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS)
Media
CVE-2026-1721
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler
Media
CVE-2026-56294
cap-go/capacitor-native-biometric Authentication Bypass
Baja
CVE-2025-68458
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior
Baja
CVE-2026-25149
Qwik City Open Redirect via fixTrailingSlash
Media
CVE-2026-25151
Qwik City has a CSRF Protection Bypass via Content-Type Header Validation
Alta
CVE-2026-25157
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Crítica
CVE-2026-23515
Signal K set-system-time plugin vulnerable to RCE - Command Injection
Baja
CVE-2026-25050
Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy
Alta
CVE-2026-24132
Orval Mock Generation Code Injection via const
Alta
CVE-2026-0933
Wrangler affected by OS Command Injection in `wrangler pages deploy`
Media
CVE-2026-1245
binary-parser library has a code injection vulnerability
Alta
CVE-2026-23735
GraphQL Modules has a Race Condition issue
Alta
CVE-2026-22610
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
Media
CVE-2026-22030
React Router has CSRF issue in Action/Server Action Request Processing
Alta
CVE-2026-21884
React Router SSR XSS in ScrollRestoration
Alta
CVE-2025-59057
React Router has XSS Vulnerability
Alta
CVE-2025-69262
pnpm vulnerable to Command Injection via environment variable substitution
Alta
CVE-2025-66648
`vega-functions` vulnerable to Cross-site Scripting via `setdata` function
Alta
CVE-2025-65110
Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope
Alta
CVE-2025-69256
serverless MCP Server vulnerable to Command Injection in list-projects tool
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.