High
CVE-2025-26240
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,002
Reset filters
Medium
CVE-2026-54386
marimo contains a reflected cross-site scripting vulnerability in the notebook page
Low
CVE-2026-12566
BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing
High
CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)
High
CVE-2026-54012
Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion
High
CVE-2026-54013
Open WebUI: Stored XSS to Account Takeover via Model Profile Images
High
CVE-2026-54017
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
High
CVE-2026-54018
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
Medium
CVE-2026-54021
Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter
Medium
CVE-2026-54022
Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Medium
CVE-2026-54014
Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}
Medium
CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field
Medium
CVE-2026-54015
Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion
High
CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via action:submit
Medium
CVE-2026-54233
vLLM: OOM Denial of Service via Audio Decompression Bomb
High
CVE-2026-50023
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
Medium
CVE-2026-50019
yt-dlp: File Downloader cookie leak with curl
Medium
CVE-2026-54006
Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar
Medium
CVE-2026-46448
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Medium
CVE-2026-54236
vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
Low
CVE-2026-53540
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
Low
CVE-2026-53538
python-multipart: Semicolon treated as querystring field separator enables parameter smuggling
High
CVE-2026-49855
tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)
Medium
CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.