High
CVE-2026-44001
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2026-43999
vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape
Critical
CVE-2026-44005
vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape
Critical
CVE-2026-43997
vm2 Access to Host Object Enables Sandbox Escape
Critical
CVE-2026-44006
vm2 has a Sandbox Escape Vulnerability
High
CVE-2026-44503
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
Critical
CVE-2026-44484
Compromise of PyTorch Lightning PyPi Package Versions
High
CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
Medium
CVE-2026-42586
Netty Redis Codec Encoder has a CRLF Injection Issue
Medium
CVE-2026-42585
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
High
CVE-2026-42584
Netty has HttpClientCodec response desynchronization
High
CVE-2026-42583
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
High
CVE-2026-42582
Netty HTTP/3 QPACK literal unbounded allocation
Medium
CVE-2026-42581
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Medium
CVE-2026-42580
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
High
CVE-2026-42579
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Low
CVE-2026-42578
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
Low
ghsa-x5hg-x4gv-j98m
OpenSearch has ineffective TLS certificate hostname verification
Medium
ghsa-x83w-23jp-g6pw
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
Low
ghsa-22vx-2x23-98w6
OpenSearch vulnerable to improper authorization for Rollover Requests
Low
ghsa-83x9-vc3c-hghc
OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
Medium
CVE-2026-44308
Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications
Medium
CVE-2026-44479
Vercel: Non-interactive mode includes CLI arguments in suggested command output
Medium
CVE-2025-66105
Bus Ticket Booking with Seat Reservation < 5.6.8 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.