High
CVE-2024-12216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2024-10906
DB-GPT vulnerable to Cross-Site Request Forgery
Medium
CVE-2024-10908
FastChat open redirect vulnerability
High
CVE-2024-11602
Feast Cross-Origin Resource Sharing vulnerability
Medium
CVE-2024-10940
langchain-core allows unauthorized users to read arbitrary files from the host file system
High
CVE-2024-11043
InvokeAI Uncontrolled Resource Consumption vulnerability
High
CVE-2024-10821
InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
High
CVE-2024-10907
FastChat Uncontrolled Resource Consumption vulnerability
High
CVE-2024-11603
FastChat Server-Side Request Forgery vulnerability
High
CVE-2024-10912
FastChat Denial of Service vulnerability
High
CVE-2024-10713
HyperLPR Denial of Service vulnerability
High
CVE-2024-10624
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
High
CVE-2024-10648
Gradio Vulnerable to Arbitrary File Deletion
High
CVE-2024-10569
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
High
CVE-2024-10830
DB-GPT Path Traversal vulnerability
High
CVE-2024-10829
DB-GPT Uncontrolled Resource Consumption vulnerability
High
CVE-2024-10188
LiteLLM Vulnerable to Denial of Service (DoS)
High
CVE-2024-10110
Aim Vulnerable to Denial of Service (DoS)
High
CVE-2025-27154
Spotipy's cache file, containing spotify auth token, is created with overly broad permissions
Medium
CVE-2025-26623
Exiv2 allows Use After Free
Medium
CVE-2025-1300
CodeChecker open redirect when URL contains multiple slashes after the product name
Low
CVE-2025-27145
copyparty renders unsanitized filenames as HTML when user uploads empty files
High
CVE-2025-25362
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
Medium
CVE-2025-27516
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.