Medium
CVE-2026-42086
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 229
Reset filters
Medium
CVE-2026-41182
LangSmith SDK: Streaming token events bypass output redaction
Medium
CVE-2026-34755
vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
High
CVE-2026-33533
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
High
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink
High
CVE-2026-33718
OpenHands is Vulnerable to Command Injection through its Git Diff Handler
High
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Low
CVE-2026-32722
Stored XSS in Memray-generated HTML reports via unescaped command-line metadata
High
CVE-2026-32981
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file
High
CVE-2026-32597
PyJWT accepts unknown `crit` header extensions
Medium
CVE-2026-28231
pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read
Medium
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Medium
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Medium
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Medium
CVE-2025-62608
MLX has heap-buffer-overflow in load()
Medium
CVE-2025-46722
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
High
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Medium
CVE-2025-1979
ray vulnerable to Insertion of Sensitive Information into Log File
Low
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Low
CVE-2025-27104
Vyper has a double eval in For List Iter
Medium
CVE-2024-55456
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Medium
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Low
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.