High
CVE-2025-11157
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2025-67743
Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
High
CVE-2025-67729
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
Low
CVE-2026-21439
badkeys vulnerable to ASCII control character injection on console via malformed input
High
CVE-2025-69223
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Medium
CVE-2025-68480
Marshmallow has DoS in Schema.load(many)
Low
CVE-2025-14881
pretix has Broken Access Control Allowing Cross-User File Access via UUID
Low
CVE-2025-14882
pretix has Broken Access Control Allowing Cross-User File Access via UUID
High
CVE-2025-68279
Weblate has an arbitrary file read via symbolic links
Low
CVE-2025-68142
PyMdown Extensions has a ReDOS bug in its Figure Capture extension
Medium
CVE-2025-14546
FastAPI SSP is vulnerable to Cross-site Request Forgery (CSRF) through improper OAuth parameter validation
Medium
CVE-2025-34469
Cowrie has a SSRF vulnerability in wget/curl emulation enabling DDoS amplification
Medium
CVE-2025-68463
Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
Medium
CVE-2025-68146
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Medium
CVE-2025-68481
FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO
High
CVE-2025-53000
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Medium
CVE-2025-68145
mcp-server-git has missing path validation when using --repository flag
Medium
CVE-2025-68144
mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
Medium
CVE-2025-68143
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
High
CVE-2025-68477
Langflow vulnerable to Server-Side Request Forgery
High
CVE-2025-66471
urllib3 streaming API improperly handles highly compressed data
Medium
CVE-2025-67502
Open Redirect Vulnerability in Taguette
Low
CVE-2025-64725
Weblate has improper validation upon invitation acceptance
High
CVE-2025-14542
Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual JSON specification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.