Baja
CVE-2026-35648
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.499
Restablecer filtros
Alta
CVE-2026-35638
OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths
Alta
CVE-2026-35660
OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers
Media
CVE-2026-35634
OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication
Baja
CVE-2026-33769
Astro: Remote allowlist bypass via unanchored matchPathname wildcard
Media
CVE-2026-33768
Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`
Media
CVE-2026-33749
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
Media
CVE-2026-33724
n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
Crítica
CVE-2026-33660
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Media
CVE-2026-30587
Seafile Server has multiple stored XSS vulnerabilities
Alta
CVE-2026-33287
LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern
Alta
CVE-2026-33285
LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash
Baja
ghsa-8g29-8xwr-qmhr
@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling
Baja
ghsa-5j35-xr4g-vwf4
@grackle-ai/server has a Missing Secure Flag on Session Cookie
Media
ghsa-3mjm-x6gw-2x42
@grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers
Media
ghsa-xq7h-vwjp-5vrh
@grackle-ai/powerline Runs Without Authentication by Default
Alta
ghsa-w3hv-x4fp-6h6j
@grackle-ai/server has Missing WebSocket Origin Header Validation
Baja
ghsa-7q9x-8g6p-3x75
@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template
Alta
CVE-2026-33627
Parse Server exposes auth data via /users/me endpoint
Baja
CVE-2026-33624
Parse Server: MFA recovery code single-use bypass via concurrent requests
Media
CVE-2026-29772
Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands
Alta
CVE-2026-33539
Parse Server has SQL Injection through aggregate and distinct field names in PostgreSQL adapter
Alta
CVE-2026-33538
Parse Server: Denial of Service via unindexed database query for unconfigured auth providers
Alta
ghsa-g3qj-j598-cxmq
fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.