High
CVE-2026-47383
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2026-47382
NocoDB: Server-Side Request Forgery via Database Connection Host
Medium
CVE-2026-47381
NocoDB: Cross-Workspace Integration Use in Connection Test
Medium
CVE-2026-47380
NocoDB: User Enumeration via Sign-In Timing
Medium
CVE-2026-47379
NocoDB: Plaintext Password Comparison in Shared Views
Medium
CVE-2026-47378
NocoDB: Hidden Column Exposure in Public Shared View Endpoints
Medium
CVE-2026-47377
NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin
Medium
CVE-2026-47376
NocoDB: Reflected Cross-Site Scripting via Password Reset Token
Medium
CVE-2026-47375
NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`
Medium
CVE-2026-47279
NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints
Medium
CVE-2026-47250
MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration
Medium
CVE-2026-10732
decompress: Arbitrary File Write via Archive Extraction (Zip Slip)
Critical
ghsa-jpvj-wpmj-h7rv
Supply chain compromise via malicious @cap-js/openapi
Medium
CVE-2026-47676
Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths
Medium
CVE-2026-47674
Hono: IP Restriction bypasses static deny rules for non-canonical IPv6
Medium
CVE-2026-47675
Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection
Medium
CVE-2026-47673
Hono: JWT middleware accepts any Authorization scheme, not only Bearer
High
CVE-2026-45337
Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pending
High
CVE-2026-44496
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
High
CVE-2026-44488
Allocation of Resources Without Limits or Throttling in Axios
High
CVE-2026-44487
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
High
CVE-2026-44486
Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
Low
CVE-2026-10802
Keystone: GraphQL API Endpoint Lacks Query Depth Limits
High
CVE-2026-49143
browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.