Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filtersPicklescan is missing detection when calling built-in python cProfile.run
Picklescan is missing detection when calling built-in python doctest.debug_script
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads
Picklescan has a missing detection when calling built-in python profile.Profile.run
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Picklescan has a missing detection when calling built-in python trace.Trace.run
mitmproxy binaries embed a vulnerable python-hyper/h2 dependency
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile
Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability
Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions
Litestar has potential log injection in exception logging
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.