Low
CVE-2026-14967
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,341
Reset filters
Medium
ghsa-f66q-9rf6-8795
Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion
Medium
ghsa-q855-8rh5-jfgq
ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
High
CVE-2026-40036
Unfurl's unbounded zlib decompression allows decompression bomb DoS
High
CVE-2026-24779
vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector
High
CVE-2026-24123
BentoML has a Path Traversal via Bentofile Configuration
High
CVE-2026-24049
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
High
CVE-2026-23842
ChatterBot Vulnerable to Denial of Service via Database Connection Pool Exhaustion
High
CVE-2026-22807
vLLM affected by RCE via auto_map dynamic module loading during model initialization
Low
CVE-2026-24130
Moonraker affected by LDAP search filter injection
High
CVE-2025-68616
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Medium
CVE-2026-22702
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
High
CVE-2026-22870
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
High
CVE-2026-22871
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
High
CVE-2026-22033
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
Medium
CVE-2026-22701
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
High
CVE-2026-23949
jaraco.context Has a Path Traversal Vulnerability
Low
CVE-2026-22691
pypdf has possible long runtimes for malformed startxref
High
CVE-2026-22612
Fickling vulnerable to detection bypass due to "builtins" blindness
Medium
CVE-2026-21872
NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links
Medium
CVE-2026-21874
NiceGUI has Redis connection leak via tab storage causes service degradation
Medium
CVE-2026-21883
Bokeh server applications have Incomplete Origin Validation in WebSockets
Medium
CVE-2026-21851
MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download
High
CVE-2025-71321
Picklescan vulnerable to Arbitrary File Writing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.