High
ghsa-69x8-hrgq-fjj8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 246
Reset filters
High
CVE-2026-39376
FastFeedParser has an infinite redirect loop DoS via meta-refresh chain
Critical
CVE-2026-35490
changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
Critical
CVE-2026-32714
SciTokens is vulnerable to SQL Injection in KeyCache
Unrated
pysec-2026-3
Two telnyx versions published containing credential harvesting malware
High
CVE-2026-32711
pydicom has a path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root
High
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
High
CVE-2026-32597
PyJWT accepts unknown `crit` header extensions
Critical
CVE-2026-27825
MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
Medium
CVE-2026-28348
lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes
High
ghsa-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
High
CVE-2025-11275
A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/includ
High
CVE-2025-2151
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component F
Low
CVE-2025-27104
Vyper has a double eval in For List Iter
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Medium
CVE-2024-1240
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this
Critical
CVE-2024-49768
Waitress has request processing race condition in HTTP pipelining with invalid first request
High
CVE-2024-46488
Heap-based Buffer Overflow in sqlite-vec
Medium
CVE-2024-8375
Reverb use after free vulnerability
High
CVE-2024-24759
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Medium
CVE-2024-42353
WebOb's location header normalization during redirect leads to open redirect
High
CVE-2024-41672
sniff_csv provides filesystem access even when enable_external_access is disabled in duckdb
Medium
ghsa-564j-v29w-rqr6
Khoj Open Redirect Vulnerability in Login Page
Low
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.