Crítica
Explotada en ataques
CVE-2026-42208
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.364
Restablecer filtros
Crítica
CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Crítica
CVE-2023-43654
TorchServe Server-Side Request Forgery vulnerability
Crítica
CVE-2023-6020
Ray Missing Authorization vulnerability
Crítica
CVE-2023-6021
Ray Path Traversal vulnerability
Crítica
CVE-2022-37454
Buffer overflow in sponge queue functions
Crítica
CVE-2024-21669
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
Crítica
CVE-2024-5751
litellm vulnerable to remote code execution based on using eval unsafely
Crítica
CVE-2024-34359
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
Crítica
CVE-2024-32651
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Crítica
CVE-2024-35198
TorchServe vulnerable to bypass of allowed_urls configuration
Crítica
CVE-2024-32874
Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Crítica
CVE-2024-35058
NASA AIT-Core vulnerable to remote code execution
Crítica
CVE-2024-32880
pyLoad allows upload to arbitrary folder lead to RCE
Crítica
CVE-2024-2952
LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint
Crítica
CVE-2024-35059
NASA AIT-Core vulnerable to remote code execution
Crítica
CVE-2024-35057
NASA AIT-Core vulnerable to remote code execution
Crítica
CVE-2024-35056
NASA AIT-Core vulnerable to SQL Injection
Crítica
CVE-2024-2195
Aim Web API vulnerable to Remote Code Execution
Crítica
CVE-2025-54802
pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)
Crítica
CVE-2025-68664
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Crítica
CVE-2025-53890
pyLoad vulnerable to XSS through insecure CAPTCHA
Crítica
CVE-2025-54381
BentoML SSRF Vulnerability in File Upload Processing
Crítica
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.