Media
CVE-2026-6173
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.529
Media
CVE-2026-6170
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute
Media
CVE-2026-6171
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
Media
CVE-2026-6172
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter
Alta
CVE-2026-92000
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
Alta
CVE-2026-102282
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
Baja
CVE-2026-102279
Laravel: XSS in Debug Page Information
Media
CVE-2026-100702
Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS
Media
CVE-2026-18149
undici vulnerable to Denial of Service via orphaned RetryHandler response body
Baja
CVE-2026-18540
undici vulnerable to downstream response splitting via retry interceptor
Alta
CVE-2026-19534
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
Media
CVE-2026-84890
undici vulnerable to Denial of Service via unbounded decompression of compressed responses
Media
CVE-2026-84933
undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
Baja
CVE-2026-84947
undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
Alta
CVE-2026-84961
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
Baja
CVE-2026-85008
undici vulnerable to caching and replay of unsafe HTTP method responses
Alta
CVE-2026-85152
undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
Media
CVE-2026-85014
undici vulnerable to Denial of Service via WebSocketStream unclean close
Baja
CVE-2026-102601
Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter
Alta
CVE-2026-92599
joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`
Media
CVE-2026-102672
Electron: Local race condition in Squirrel.Mac update installation on macOS
Alta
CVE-2026-89294
Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter
Alta
CVE-2026-102673
Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab
Alta
CVE-2026-102674
Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.