Media
CVE-2026-42867
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.003
Restablecer filtros
Alta
CVE-2026-48099
WsgiDAV encoded dot segments can escape filesystem share roots
Alta
CVE-2026-47781
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
Media
CVE-2026-47763
PDM: Project-Local State and Config Writes Follow Symlinks
Media
CVE-2026-48053
Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset
Media
CVE-2026-54445
Vantage6: Set admin user and password from environment or configuration
Alta
CVE-2026-48060
Litestar has HTML Injection Through its CSRF Token
Media
CVE-2026-48061
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header
Baja
CVE-2026-47712
Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`
Media
CVE-2026-47734
Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
Baja
CVE-2024-24769
Vantage6: No limit on emails sent for password/MFA reset
Media
CVE-2024-27928
Vantage6: 2FA can be circumvented with hacked email access
Alta
CVE-2026-44023
Docling Core: Unsafe remote filename resolution
Alta
CVE-2026-47417
praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR
Alta
CVE-2026-47405
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership
Alta
CVE-2026-48169
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
Alta
CVE-2026-47399
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID
Baja
CVE-2026-10177
Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint
Alta
CVE-2026-47394
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate
Media
CVE-2026-47213
BoxLite has a Timeout Bypass Vulnerability
Alta
CVE-2026-10108
xiaomusic contains an unauthenticated path traversal vulnerability
Media
CVE-2026-46380
compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem
Alta
CVE-2026-46439
compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)
Media
CVE-2026-45774
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.