Unrated
CVE-2026-81163
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Unrated
CVE-2026-16648
drupal/symfony_mailer_log - SA-CONTRIB-2026-128
Unrated
CVE-2026-84917
drupal/jsonapi_role_access - SA-CONTRIB-2026-127
Unrated
CVE-2026-84916
drupal/islandora - SA-CONTRIB-2026-126
Unrated
CVE-2026-84924
drupal/otp_verification - SA-CONTRIB-2026-125
Unrated
CVE-2026-84923
drupal/otp_verification - SA-CONTRIB-2026-124
Unrated
CVE-2026-84915
drupal/component_blocks - SA-CONTRIB-2026-123
Unrated
CVE-2026-84914
drupal/calculate_working_days - SA-CONTRIB-2026-122
Unrated
CVE-2026-84913
drupal/ai_translate - SA-CONTRIB-2026-121
Unrated
CVE-2026-84912
drupal/ai - SA-CONTRIB-2026-120
Unrated
CVE-2026-84911
drupal/ai - SA-CONTRIB-2026-119
Unrated
CVE-2026-84910
drupal/advanced_search - SA-CONTRIB-2026-118
Medium
CVE-2026-2573
GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
High
CVE-2026-75931
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
High
CVE-2026-75975
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
High
CVE-2026-75899
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
High
CVE-2026-76172
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Medium
CVE-2026-83610
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
Medium
CVE-2026-16732
fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count
Medium
CVE-2026-18504
fastify vulnerable to schema validation bypass via root primitive coercion mismatch
High
CVE-2026-71553
ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
Medium
CVE-2026-82396
Sulu: Stored XSS via media download inline-disposition override
Medium
CVE-2026-82394
Sulu: Fix authorization bypass when creating preview links
Medium
CVE-2026-82395
Sulu: Media move/update authorization bypass (IDOR)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.