Medium
CVE-2025-46560
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 229
Reset filters
Medium
CVE-2022-4969
rockhopper Buffer Overflow vulnerability
High
CVE-2024-34072
sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
High
CVE-2024-29189
ansys-geometry-core OS Command Injection vulnerability
Medium
CVE-2024-52296
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
High
CVE-2023-25663
TensorFlow has Null Pointer Error in TensorArrayConcatV2
High
CVE-2023-25660
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
High
CVE-2023-25662
TensorFlow vulnerable to integer overflow in EditDistance
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Critical
CVE-2026-42601
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
Critical
CVE-2023-6019
Ray OS Command Injection vulnerability
Critical
CVE-2023-48022
Ray has arbitrary code execution via jobs submission API
Critical
CVE-2023-6020
Ray Missing Authorization vulnerability
Critical
CVE-2023-6021
Ray Path Traversal vulnerability
Critical
Exploited in attacks
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Critical
CVE-2025-34351
Ray's New Token Authentication is Disabled By Default
Critical
CVE-2025-43859
h11 accepts some malformed Chunked-Encoding bodies
Critical
CVE-2026-44182
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Medium
CVE-2026-47104
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB
Medium
CVE-2026-23679
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface clai
High
CVE-2026-42304
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Medium
ghsa-88q9-cmp2-c2vq
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
High
CVE-2026-41486
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Low
ghsa-7ww3-xvf5-cxwm
ciguard: Web UI is missing HTTP defence-in-depth headers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.