High
CVE-2026-48099
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Medium
CVE-2026-48045
python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Medium
CVE-2026-48155
pypdf: Possible large memory usage for large offsets for layout mode text
Medium
CVE-2026-48156
pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
High
CVE-2026-47781
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
Medium
CVE-2026-47763
PDM: Project-Local State and Config Writes Follow Symlinks
High
CVE-2026-47764
PDM wheel installation leads to Path Traversal via overridden write_to_fs
Medium
CVE-2026-48053
Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset
Medium
CVE-2026-54533
vantage6 node has an Improper Access Control issue
Medium
CVE-2026-54445
Vantage6: Set admin user and password from environment or configuration
Low
CVE-2026-47715
Bugsink: Issue event views can show an event from another project if its UUID is known
High
CVE-2026-48060
Litestar has HTML Injection Through its CSRF Token
Medium
CVE-2026-48061
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header
Low
CVE-2026-47712
Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`
Medium
CVE-2026-47734
Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
Low
CVE-2026-47716
Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
Medium
CVE-2026-53954
Bugsink: DOS using large numbers of event tags
Medium
CVE-2026-47728
Bugsink: Project scoping missing in sourcemap and debug-file lookup
Low
CVE-2024-24769
Vantage6: No limit on emails sent for password/MFA reset
Medium
CVE-2024-27928
Vantage6: 2FA can be circumvented with hacked email access
High
CVE-2026-47419
praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR
Low
CVE-2026-10692
Code Index MCP is vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2026-47117
OpenMed vulnerable to remote code injection through privacy-filter model loading path
Medium
CVE-2026-43980
malla: Stored XSS via Meshtastic node names in multiple frontend pages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.