Low
CVE-2026-42448
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-44305
Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled
High
CVE-2026-44304
Lemur: LDAP Filter Injection enables post-authentication privilege escalation
High
CVE-2026-42544
Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic
Medium
CVE-2026-42545
Granian vulnerable to DoS via WSGI response header panic
High
CVE-2026-42997
OpenStack Ironic has an Incorrect Resource Transfer Between Spheres
Low
CVE-2026-44405
Paramiko rsakey.py allows the SHA-1 algorithm
Medium
CVE-2026-44226
PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI
Medium
CVE-2026-44222
vLLM Vulnerable to Remote DoS via Special-Token Placeholders
Low
CVE-2026-44218
ciguard: Container image runs as root (no USER directive)
Low
CVE-2026-44220
ciguard: discover_pipeline_files follows symlinks out of scan root
Medium
CVE-2026-44219
ciguard: SCA HTTP client reads response body without size cap
High
CVE-2026-33079
Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input
Medium
CVE-2026-42303
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Medium
CVE-2026-43901
wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
High
CVE-2026-42079
PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope
Medium
CVE-2026-42078
PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
Medium
CVE-2026-42080
PPTAgent: Arbitrary File Write via `save_generated_slides`
Medium
CVE-2026-42175
requests-hardened is Vulnerable to Server-Side Request Forgery
Medium
CVE-2026-43002
OpenStack Horizon has Incorrect Behavior Order
Low
CVE-2026-42874
Microdot has HTTP response splitting in Response.set_cookie()
Low
CVE-2026-7847
Langchain-Chatchat Uses Insufficiently Random Values
Medium
CVE-2026-42310
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
High
CVE-2025-67796
IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.