Baja
CVE-2026-4277
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.861
Restablecer filtros
Alta
CVE-2026-3902
Django vulnerable to ASGI header spoofing via underscore/hyphen conflation
Alta
CVE-2026-35463
pyLoad: Improper Neutralization of Special Elements used in an OS Command
Alta
CVE-2026-33034
Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit
Media
CVE-2026-33033
Django has potential DoS via MultiPartParser through crafted multipart uploads
Media
CVE-2026-33866
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint
Media
CVE-2026-33865
MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface
Crítica
CVE-2026-1114
In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON Web Tokens (JWT). This vulnerabilit
Media
CVE-2026-1839
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
Crítica
CVE-2026-35615
PraisonAI Has Path Traversal in FileTools
Crítica
CVE-2026-39305
PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator
Crítica
CVE-2026-35171
Kedro has Arbitrary Code Execution via Malicious Logging Configuration
Alta
CVE-2026-35167
Kedro: Path Traversal in versioned dataset loading via unsanitized version string
Alta
CVE-2026-35044
BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation
Alta
CVE-2026-35043
BentoML: Command Injection in cloud deployment setup script
Media
CVE-2026-34756
vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
Media
CVE-2026-34755
vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Crítica
CVE-2026-35459
pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
Alta
CVE-2026-34824
Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service
Alta
CVE-2026-33175
Auth0OAuthenticator has an Authentication Bypass via Unverified Email Claims
Media
CVE-2026-33709
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links whi
Alta
CVE-2026-5463
pymetasploit3 vulnerable to command injection in console.run_module_with_output()
Alta
CVE-2026-35536
Tornado has cookie attribute injection via .RequestHandler.set_cookie
Media
CVE-2026-34760
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.