Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 704
Reset filtersVyper's `slice()` may elide side-effects when output length is 0
Data exposure via ZeroMQ on multi-node vLLM deployment
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Aim Excessive Data Query Operations in a Large Data Table vulnerability
Aim Uncontrolled Resource Consumption vulnerability
Aim allows denial of service due to no timeouts for some tracking server endpoints
Aim vulnerable to Cross-Site Request Forgery
Aim Path Traversal vulnerability
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Kedro allows Remote Code Execution by Pulling Micro Packages
Aim Uncontrolled Resource Consumption vulnerability
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
GluonCV Arbitrary File Write via TarSlip
Aim Vulnerable to Denial of Service (DoS)
Label Studio has a Path Traversal Vulnerability via image Field
nbgrader's `frame-ancestors: self` grants all users access to formgrader
python-libarchive directory traversal
LLama Factory Remote OS Command Injection Vulnerability
ReDoS in giskard's transformation.py (GHSL-2024-324)
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.