High
CVE-2026-56835
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
CVE-2026-56837
PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing
High
CVE-2026-56834
PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage
High
CVE-2026-56836
PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
High
CVE-2026-56833
PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal
Medium
CVE-2026-57128
PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
High
CVE-2026-56832
PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals
Medium
CVE-2026-73627
JupyterLab PluginManager lock-rule enforcement bypass
Medium
ghsa-mfr4-mq8w-vmg6
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
High
CVE-2026-105315
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
High
CVE-2026-59886
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
High
CVE-2026-59197
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
Medium
CVE-2026-59203
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
High
CVE-2026-59205
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
High
CVE-2026-59199
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
Medium
ghsa-8f6j-263m-g72x
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
High
ghsa-xf7x-x43h-rpqh
json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS
High
CVE-2026-49851
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
High
CVE-2026-49477
Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser
High
CVE-2026-49476
Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists
High
CVE-2026-49471
Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE
Medium
CVE-2026-48737
pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs
Medium
CVE-2026-48987
pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager
High
CVE-2026-26193
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.