High
CVE-2024-58340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 704
Reset filters
Medium
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Medium
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Medium
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Low
CVE-2025-63396
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do
High
CVE-2025-57106
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing
High
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Low
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Critical
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
High
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
High
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Critical
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Medium
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Medium
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Medium
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
High
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Low
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Medium
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
High
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Medium
CVE-2025-53865
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).
Medium
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Medium
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Medium
CVE-2025-71379
vLLM vulnerable to Regular Expression Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.