Media
CVE-2026-22218
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Media
CVE-2026-23528
Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
Alta
CVE-2025-68675
Apache Airflow proxy credentials for various providers might leak in task logs
Alta
CVE-2025-68438
Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated
Alta
CVE-2024-58339
LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() l
Alta
CVE-2024-14021
LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The
Alta
CVE-2024-58340
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
Alta
CVE-2025-68472
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
Media
CVE-2026-22773
vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions
Crítica
CVE-2026-22584
Salesforce Uni2TS has a Code Injection vulnerability
Crítica
CVE-2025-15346
wolfSSL Python module vulnerable to Improper Authentication
Crítica
CVE-2025-61492
terminal-controller-mcp vulnerable to Command Injection
Media
CVE-2025-61782
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authen
Crítica
CVE-2025-61781
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePopoverDeletionMutation" allows users to del
Alta
CVE-2026-21445
Langflow Missing Authentication on Critical API Endpoints
Media
CVE-2025-69277
libsodium has Incomplete List of Disallowed Inputs
Media
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Alta
CVE-2025-71367
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter
Alta
CVE-2025-71375
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller
Alta
CVE-2025-71372
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef
Media
CVE-2025-71347
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval
Alta
CVE-2025-71373
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller
Alta
CVE-2025-71362
Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef
Alta
ghsa-vqmv-47xg-9wpr
Picklescan missing detection when calling pty.spawn
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.