Low
CVE-2026-7150
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Low
CVE-2026-7142
Wooey has an Incorrect Privilege Assignment issue
Medium
CVE-2026-6357
pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
High
CVE-2026-42203
LiteLLM: Server-Side Template Injection in /prompts/test endpoint
High
Exploited in attacks
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
Medium
CVE-2026-7149
kaggle-mcp has a Path Traversal issue
Medium
CVE-2026-6550
AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache
Low
CVE-2026-6984
AstrBot has Incomplete Filtering of Special Elements
Low
CVE-2026-6878
verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()
Low
CVE-2026-41140
Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
High
CVE-2026-33626
LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading
High
CVE-2026-6859
InstructLab Includes Functionality from Untrusted Control Sphere
High
CVE-2026-6855
InstructLab vulnerable to Path Traversal
Medium
CVE-2025-66335
Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization
Medium
CVE-2026-3219
pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
Medium
CVE-2026-6606
AgentScope vulnerable to Server-Side Request Forgery
Low
CVE-2026-6587
RAGAS has SSRF via Multi-Modal Faithfulness Collections Module
Medium
CVE-2026-6608
FastChat has a Content Moderation Bypass via Arena Side-by-Side Views
Medium
CVE-2026-6607
FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)
Low
CVE-2026-6599
Langflow vulnerable to injection
Low
CVE-2026-6598
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
Low
CVE-2026-6597
Langflow has an Information Leak through Incomplete API Key Redaction
Medium
CVE-2026-6596
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Medium
CVE-2026-6604
AgentScope vulnerable to Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.