High
CVE-2026-14244
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-14158
Widget Logic Visual <= 1.52 - Authenticated (Subscriber+) Remote Code Execution via 'nwlv[cod-tag]' Parameter
Unrated
pysec-2026-1075
Malicious code in tiktoken-mcp (PyPI)
Unrated
pysec-2026-1074
Malicious code in ray-mcp-server (PyPI)
Unrated
pysec-2026-1073
Malicious code in orchestr8-platform (PyPI)
Unrated
pysec-2026-1072
Malicious code in openai-mcp (PyPI)
Unrated
pysec-2026-1071
Malicious code in mem8 (PyPI)
Unrated
pysec-2026-1070
Malicious code in langchain-core-mcp (PyPI)
High
CVE-2025-10279
mlflow Creates of Temporary File in Directory with Insecure Permissions
High
CVE-2025-62349
Salt Authentication Protocol Version Downgrade Allows Minion Impersonation
High
CVE-2025-62348
Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload
High
CVE-2026-0599
Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2025-6208
llama-index-core vulnerable to Uncontrolled Resource Consumption
Low
CVE-2026-25211
Llama Stack exposes secret in initialization log
High
CVE-2026-40036
Unfurl's unbounded zlib decompression allows decompression bomb DoS
High
CVE-2026-1117
Lollms has an Improper Access Control vulnerability
High
CVE-2026-24779
vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector
High
CVE-2026-24486
Python-Multipart has Arbitrary File Write via Non-Default Configuration
High
CVE-2026-0994
protobuf affected by a JSON recursion depth bypass
High
CVE-2026-1260
Sentencepiece has a a heap overflow issue
Low
CVE-2026-24408
sigstore CSRF possibility in OIDC authentication during signing
Medium
CVE-2026-24688
pypdf has possible Infinite Loop when processing outlines/bookmarks
High
CVE-2026-24123
BentoML has a Path Traversal via Bentofile Configuration
Medium
CVE-2026-23892
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.