Low
CVE-2026-41358
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2026-24118
VM2 Sandbox Breakout Through __lookupGetter__
High
CVE-2026-42349
Clerk has an authorization bypass when combining organization, billing, or reverification checks
High
CVE-2026-42449
n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders
High
CVE-2026-40171
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
Medium
CVE-2026-41686
Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool
High
CVE-2026-42353
i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters
High
CVE-2026-41680
Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer
Medium
CVE-2026-44996
OpenClaw: Webchat audio embedding could read local files without local-root containment
Medium
CVE-2026-44991
OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners
Critical
CVE-2026-42231
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE
High
CVE-2026-42226
n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
High
CVE-2026-42234
n8n has a Python Task Runner Sandbox Escape Vulnerability
High
CVE-2026-42236
n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration
Medium
CVE-2026-42228
n8n Vulnerable to Hijacking of Unauthenticated Chat Execution
Medium
CVE-2026-42237
n8n has SQL Injection in Snowflake and MySQL Nodes
Medium
CVE-2026-7223
BigSweetPotatoStudio HyperChat has a Server-Side Request Forgery issue
Medium
CVE-2026-44998
OpenClaw: Bundled MCP/LSP tools could bypass configured tool policy
Low
CVE-2026-45000
OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks
Low
CVE-2026-41909
OpenClaw: Paired-device pairing actions were not limited to the caller device
Medium
CVE-2026-44995
OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config
Low
CVE-2026-44999
OpenClaw: Isolated cron awareness events were recorded as trusted system events
Medium
CVE-2026-44993
OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy
Medium
ghsa-39h7-pwv7-rc3x
Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.