Medium
CVE-2026-1213
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-24490
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
Medium
CVE-2025-11687
GI-DocGen vulnerable to Reflected XSS via unescaped query strings
Medium
CVE-2026-24489
Gakido vulnerable to HTTP Header Injection (CRLF Injection)
High
Exploited in attacks
CVE-2026-0770
Langflow affected by Remote Code Execution via validate_code() exec()
High
CVE-2026-24780
AutoGPT is Vulnerable to RCE via Disabled Block Execution
Medium
CVE-2026-23946
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Medium
CVE-2026-23877
Swing Music has a Directory Traversal & Filesystem can be accessed by a non-admin user
High
CVE-2026-23490
pyasn1 has a DoS vulnerability in decoder
Medium
CVE-2025-71176
pytest has vulnerable tmpdir handling
High
CVE-2026-24049
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
Low
CVE-2026-23996
FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection
High
CVE-2026-23842
ChatterBot Vulnerable to Denial of Service via Database Connection Pool Exhaustion
High
CVE-2026-22219
Chainlit contain a server-side request forgery (SSRF) vulnerability
Medium
CVE-2026-23968
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
High
CVE-2026-22807
vLLM affected by RCE via auto_map dynamic module loading during model initialization
Low
CVE-2026-24130
Moonraker affected by LDAP search filter injection
Medium
CVE-2026-23986
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
Medium
CVE-2026-23833
ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
High
CVE-2026-24009
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
High
CVE-2025-68616
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Medium
CVE-2026-22702
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
High
CVE-2025-14279
MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation
Low
CVE-2026-21889
Weblate leaks information via screenshots
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.