High
CVE-2025-57760
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Medium
CVE-2025-71369
Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers
Medium
CVE-2025-71350
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run
Medium
CVE-2025-71356
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
Medium
CVE-2025-71353
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get
Medium
CVE-2025-71366
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile
Low
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
High
CVE-2025-8747
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
High
CVE-2025-45768
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may
Critical
pysec-2025-72
num2words subjected to phishing attack, two versions published containing malware
Medium
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Medium
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Critical
CVE-2025-54379
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
High
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
High
CVE-2025-6209
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
Medium
CVE-2025-5472
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
Medium
CVE-2025-6210
LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit
High
CVE-2025-3225
LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser
Medium
CVE-2025-3044
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions
High
CVE-2025-3046
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
Medium
CVE-2025-3108
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
High
CVE-2025-48379
Pillow vulnerability can cause write buffer overflow on BCn encoding
Critical
CVE-2025-50213
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.