Low
CVE-2026-23996
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
High
CVE-2026-23842
ChatterBot Vulnerable to Denial of Service via Database Connection Pool Exhaustion
High
CVE-2026-22219
Chainlit contain a server-side request forgery (SSRF) vulnerability
High
CVE-2026-22807
vLLM affected by RCE via auto_map dynamic module loading during model initialization
Low
CVE-2026-24130
Moonraker affected by LDAP search filter injection
Medium
CVE-2026-23833
ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
High
CVE-2025-68616
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
High
CVE-2025-14279
MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation
Medium
CVE-2026-22798
hermes's raw options logging may disclose secrets passed in via subcommand options argument
High
CVE-2026-22870
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
High
CVE-2026-22871
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Medium
CVE-2026-22779
BlackSheep's ClientSession is vulnerable to CRLF injection
High
CVE-2026-22777
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
Low
CVE-2025-68492
Chainlit contains an authorization bypass vulnerability
High
CVE-2026-22033
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
Medium
CVE-2026-22701
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
High
CVE-2026-23949
jaraco.context Has a Path Traversal Vulnerability
Medium
CVE-2026-22251
Weblate wlc has insecure API key configuration
Medium
CVE-2026-21860
Werkzeug safe_join() allows Windows special device names with compound extensions
High
CVE-2026-22609
Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist
High
CVE-2026-22606
Fickling has a bypass via runpy.run_path() and runpy.run_module()
High
CVE-2026-22607
Fickling Blocklist Bypass: cProfile.run()
High
CVE-2026-22608
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
High
CVE-2026-22612
Fickling vulnerable to detection bypass due to "builtins" blindness
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.