Media
CVE-2026-41426
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 436
Restablecer filtros
Alta
CVE-2026-41066
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
Alta
CVE-2026-41241
pretalx vulnerable to stored cross-site scripting in organizer search typeahead
Media
CVE-2026-35588
Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
Alta
CVE-2026-34839
Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS
Crítica
CVE-2026-40111
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
Media
CVE-2026-5388
justhtml includes multiple security fixes
Crítica
CVE-2026-40088
PraisonAI Vulnerable to OS Command Injection
Media
CVE-2026-39844
NiceGUI: Upload filename sanitization bypass via backslashes allows path traversal on Windows
Alta
CVE-2026-35167
Kedro: Path Traversal in versioned dataset loading via unsanitized version string
Alta
CVE-2026-35043
BentoML: Command Injection in cloud deployment setup script
Alta
CVE-2026-34591
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
Crítica
CVE-2026-34935
PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()
Baja
CVE-2026-34520
AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
Media
CVE-2026-34231
Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag
Alta
CVE-2026-33744
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
Alta
CVE-2026-33718
OpenHands is Vulnerable to Command Injection through its Git Diff Handler
Alta
CVE-2026-5389
JustHTML is vulnerable to XSS via code fence breakout in <pre> content
Alta
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Alta
CVE-2026-32875
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop
Crítica
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Alta
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Alta
CVE-2026-32611
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Alta
CVE-2026-30922
Denial of Service in pyasn1 via Unbounded Recursion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.