High
CVE-2025-2099
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 704
Reset filters
Critical
CVE-2025-47241
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Critical
CVE-2024-6829
Aim External Control of File Name or Path vulnerability
High
CVE-2024-10572
H2O Vulnerable to Denial of Service (DoS) and File Write
High
ghsa-v432-7f47-9g94
PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash
Medium
CVE-2025-29779
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
Medium
CVE-2025-29780
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
Medium
CVE-2025-1945
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Medium
CVE-2025-1944
Zip Exploit Crashes Picklescan But Not PyTorch
Low
CVE-2025-26622
Vyper's sqrt doesn't define rounding behavior
Low
CVE-2025-27104
Vyper has a double eval in For List Iter
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
High
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
Low
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Critical
CVE-2024-49375
Rasa Allows Remote Code Execution via Remote Model Loading
High
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive fu
High
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Medium
CVE-2024-47763
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run
Medium
ghsa-vx3h-qwqw-r2wq
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
Medium
CVE-2024-41810
Twisted vulnerable to HTML injection in HTTP redirect body
Low
ghsa-3v33-3wmw-3785
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
Critical
CVE-2024-5980
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.