Medium
CVE-2026-27735
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
CVE-2026-27932
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Medium
CVE-2026-25734
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Medium
CVE-2026-25736
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
High
CVE-2026-25733
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
High
CVE-2026-25136
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Medium
CVE-2026-25735
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
High
CVE-2024-56373
Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table
High
CVE-2026-26331
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
High
CVE-2026-2033
MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
High
CVE-2026-27194
D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
Low
CVE-2026-2969
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
Low
CVE-2026-2654
Hugging Face Smolagents has a Server-Side Request Forgery issue
High
CVE-2026-1669
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Medium
CVE-2026-26057
Skill-scanner Unsecured Network Binding Vulnerability
Medium
CVE-2026-25905
MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability
Medium
CVE-2026-25904
MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access
Low
CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
High
CVE-2026-25577
Emmett-Core: Unhandled CookieError Exception Causing Denial of Service
High
CVE-2026-1707
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
Medium
CVE-2026-49876
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.
High
CVE-2026-56259
Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution
High
ghsa-h4g2-xfmw-q2c9
Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
High
CVE-2026-73496
mcp-atlassian: Arbitrary server-side file read via attachment upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.