Medium
CVE-2026-40948
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-6605
AgentScope vulnerable to Server-Side Request Forgery
Medium
CVE-2026-6603
AgentScope Vulnerable to Remote Code Injection
High
CVE-2026-41490
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
Medium
CVE-2026-41314
pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
Medium
CVE-2026-41312
pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
Medium
CVE-2026-41313
pypdf: Possible long runtimes for wrong size values in incremental mode
Low
CVE-2026-35402
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures
Medium
CVE-2026-40602
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates
High
CVE-2026-40474
wger has Broken Access Control in Global Gym Configuration Update Endpoint
Medium
CVE-2026-40353
wger has Stored XSS via Unescaped License Attribution Fields
Medium
CVE-2026-40347
python-multipart affected by Denial of Service via large multipart preamble or epilogue data
Critical
CVE-2026-54334
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen
Critical
CVE-2026-54333
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable
Medium
CVE-2026-41206
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code
Medium
CVE-2026-40260
pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
Medium
CVE-2026-41168
pypdf has long runtimes for wrong size values in cross-reference and object streams
Low
CVE-2026-40319
Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check
Medium
CVE-2026-40320
Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck
High
CVE-2026-41133
pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)
High
CVE-2026-40683
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean
High
CVE-2026-1462
Keras has an untrusted deserialization vulnerability
Medium
CVE-2026-6110
MetaGPT has an eval injection in metagpt/strategy/tot.py
Low
CVE-2026-6111
MetaGPT affected by server-side request forgery in metagpt/utils/common.py
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.