Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
NiceGUI has Redis connection leak via tab storage causes service degradation
LIEF is vulnerable to segmentation fault
Authlib has 1-click Account Takeover vulnerability
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
picklescan has Arbitrary file read using `io.FileIO`
Parsl Monitoring Visualization Vulnerable to SQL Injection
Bokeh server applications have Incomplete Origin Validation in WebSockets
MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download
records-mover Injection vulnerability
loggingredactor converts non-string types to string types in logs
AIOHTTP vulnerable to DoS through chunked messages
AIOHTTP Vulnerable to Cookie Parser Warning Storm
AIOHTTP vulnerable to denial of service through large payloads
AIOHTTP vulnerable to DoS when bypassing asserts
AIOHTTP's unicode processing of header values could cause parsing discrepancies
AIOHTTP vulnerable to brute-force leak of internal static file path components
AIOHTTP has unicode match groups in regexes for ASCII protocol elements
Picklescan vulnerable to Arbitrary File Writing
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Picklescan has Incomplete List of Disallowed Inputs
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
Picklescan does not block ctypes
Home Assistant Core before is vulnerable to Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.