High
CVE-2025-71322
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 457
Reset filters
Medium
CVE-2025-67743
Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
Medium
CVE-2025-68146
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Low
CVE-2025-66040
Spotipy has a XSS vulnerability in its OAuth callback server
High
CVE-2025-12060
Keras Directory Traversal Vulnerability
High
CVE-2025-70559
Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
High
CVE-2025-62703
Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer
High
CVE-2025-64168
Agno session state overwrites between different sessions/users
Medium
CVE-2025-61912
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Medium
CVE-2025-61783
Python Social Auth - Django has unsafe account association
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Medium
CVE-2025-8869
pip's fallback tar extraction doesn't check symbolic links point to extraction directory
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
Medium
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
High
CVE-2025-48071
OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Medium
CVE-2025-3264
Transformers vulnerable to ReDoS attack through its get_imports() function
Medium
CVE-2025-22242
Salt's worker process vulnerable to denial of service through file read operation
High
CVE-2025-48957
AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
High
CVE-2024-32982
Litestar and Starlite vulnerable to Path Traversal
Medium
CVE-2025-0508
SageMaker Workflow component allows possibility of MD5 hash collisions
High
CVE-2024-7806
Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.