Medium
CVE-2026-4630
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2026-7307
Keycloak: Denial of Service via specially crafted SAML input
Medium
CVE-2026-37981
Keycloak Account Resources user lookup contains broken access control
Medium
CVE-2026-37982
Keycloak: Unauthorized account takeover via WebAuthn token replay
Medium
CVE-2026-37979
Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass
Medium
CVE-2026-8922
Keycloak: Revoked Tokens Can Remain Active When Both Realm-Level and Client-Level `notBefore` Revocation Policies are Configured
Medium
CVE-2026-8830
Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation
High
CVE-2026-45367
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
High
CVE-2026-45300
async-http-client: Cookie header not stripped on cross-origin redirect
High
CVE-2026-45609
Spring AI MCP Security: Unvalidated URL Fetching (SSRF)
Medium
CVE-2026-8771
org.linlinjava:litemall-wx-api has an Injection issue
Medium
CVE-2026-8759
Beetl's SpELFunction extension function has an expression injection risk
High
CVE-2026-45575
Improper Verification of Cryptographic Signature in com.oviva.telematik:epa4all-client
High
CVE-2026-45574
epa4all-client: TLS Certificate Validation Disabled in Production
Medium
CVE-2026-45292
OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation
Critical
CVE-2026-8178
Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading
Critical
CVE-2026-45083
Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy
Critical
CVE-2026-33117
Security feature bypass vulnerability in Azure Key Vault Keys library for Java
High
CVE-2026-41284
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Critical
CVE-2026-43515
Apache Tomcat - Security constraints not correctly applied
Critical
CVE-2026-45091
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
High
CVE-2026-41712
Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
High
CVE-2026-41713
Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
Critical
CVE-2026-27478
Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.