Medium
CVE-2026-54014
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,829
Reset filters
Medium
CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field
Medium
CVE-2026-54015
Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion
High
CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via action:submit
Medium
CVE-2026-12491
vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations
Medium
CVE-2026-54233
vLLM: OOM Denial of Service via Audio Decompression Bomb
Medium
CVE-2026-54235
vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
Medium
CVE-2026-53923
vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving
High
CVE-2026-50023
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
Medium
CVE-2026-50019
yt-dlp: File Downloader cookie leak with curl
High
CVE-2026-50574
yt-dlp: Arbitrary code execution via manifest downloads with aria2c
Medium
CVE-2026-54006
Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar
Medium
CVE-2026-46448
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Medium
CVE-2026-54236
vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
Low
CVE-2026-53537
python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
Low
CVE-2026-53540
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
High
CVE-2026-53539
python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service
Low
CVE-2026-53538
python-multipart: Semicolon treated as querystring field separator enables parameter smuggling
High
CVE-2026-49855
tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)
Low
CVE-2026-49854
Tornado has out-of-bounds memory access via C extension
Medium
CVE-2026-48735
pypdf: Manipulated XMP metadata streams can exhaust RAM
Medium
CVE-2026-49460
pypdf: Inefficient decoding of FlateDecode PNG predictor streams
Medium
CVE-2026-54530
pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction
Medium
CVE-2026-49461
pypdf: Possible large memory usage for form XObjects during text extraction
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.