High
CVE-2026-35627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2026-35670
OpenClaw: Synology Chat reply delivery could be rebound through username-based user resolution.
Medium
CVE-2026-34426
OpenClaw: Windows media loaders accepted remote-host file URLs before local path validation
High
CVE-2026-35660
OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers
Medium
CVE-2026-35634
OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication
High
CVE-2026-35618
OpenClaw: Plivo V2 verified replay identity drifts on query-only variants
Critical
CVE-2026-33864
Convict has Prototype Pollution via startsWith() function
Critical
CVE-2026-33863
Convict has prototype pollution via load(), loadFile(), and schema initialization
Low
CVE-2026-33769
Astro: Remote allowlist bypass via unanchored matchPathname wildcard
Medium
CVE-2026-33768
Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`
High
CVE-2026-32846
OpenClaw is vulnerable to Path Traversal through path validation bypass
Medium
CVE-2026-33751
n8n Vulnerable to LDAP Filter Injection in LDAP Node
Medium
CVE-2026-33750
brace-expansion: Zero-step sequence causes process hang and memory exhaustion
Medium
CVE-2026-33749
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
Medium
CVE-2026-33732
srvx is vulnerable to middleware bypass via absolute URI in request line
High
CVE-2026-33713
n8n has SQL Injection in Data Table Node via orderByColumn Expression
Critical
CVE-2026-33696
n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE
Medium
CVE-2026-33724
n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
High
CVE-2026-33722
n8n Has External Secrets Authorization Bypass in Credential Saving
Medium
CVE-2026-33720
n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
Medium
CVE-2026-33672
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
High
CVE-2026-33671
Picomatch has a ReDoS vulnerability via extglob quantifiers
High
CVE-2026-33665
n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
High
CVE-2026-33663
n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.