Alta
CVE-2026-31958
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.358
Restablecer filtros
Crítica
CVE-2026-31900
Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from
Crítica
CVE-2026-27825
MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
Media
CVE-2026-30974
copyparty: volflag `nohtml` did not block javascript in svg files
Alta
CVE-2026-30928
Glances Exposes Unauthenticated Configuration Secrets
Alta
CVE-2026-30930
Glances has SQL Injection via Process Names in TimescaleDB Export
Media
CVE-2025-70050
An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.
Media
CVE-2026-29780
eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write
Alta
CVE-2026-29065
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Media
CVE-2026-29038
changedetection.io has Reflected XSS in its RSS Tag Error Response
Alta
CVE-2026-29039
changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
Alta
CVE-2026-28802
Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification
Alta
CVE-2026-28681
IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links
Alta
ghsa-5r2p-pjr8-7fh7
SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
Alta
CVE-2026-30244
Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure
Media
CVE-2026-28413
Products.isurlinportal has possible open redirect when using more than 2 forward slashes
Media
CVE-2026-28348
lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes
Media
CVE-2026-28350
lxml-html-clean has <base> tag injection through default Cleaner configuration
Media
CVE-2026-28223
Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface
Media
CVE-2026-28222
Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes
Media
CVE-2026-28277
LangGraph checkpoint loading has unsafe msgpack deserialization
Alta
CVE-2026-25048
xgrammar vulnerable to DoS via multi-layer nesting
Media
CVE-2025-69534
Python-Markdown has an Uncaught Exception
Alta
CVE-2026-0847
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and Brack
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.