Medium
CVE-2026-54259
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,861
Reset filters
High
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Unrated
pysec-2026-610
Malicious code in ufish (PyPI)
High
CVE-2026-49119
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
Unrated
pysec-2026-609
Malicious code in synago (PyPI)
Unrated
pysec-2026-608
Malicious code in pantheon-toolsets (PyPI)
Unrated
pysec-2026-607
Malicious code in pantheon-agents (PyPI)
Unrated
pysec-2026-606
Malicious code in okite (PyPI)
Unrated
pysec-2026-605
Malicious code in nucbox (PyPI)
Unrated
pysec-2026-604
Malicious code in napari-ufish (PyPI)
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
High
CVE-2026-57585
MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error
Critical
CVE-2026-7873
Langflow: Code Injection Vulnerability in Code Validation Endpoint
Unrated
pysec-2026-594
Malicious code in mrbios (PyPI)
Unrated
pysec-2026-593
Malicious code in magique-ai (PyPI)
Unrated
pysec-2026-592
Malicious code in magique (PyPI)
Unrated
pysec-2026-591
Malicious code in funcdesc (PyPI)
Unrated
pysec-2026-590
Malicious code in executor-http (PyPI)
Unrated
pysec-2026-589
Malicious code in executor-engine (PyPI)
High
CVE-2026-58168
DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Unrated
pysec-2026-580
Malicious code in coolbox (PyPI)
Unrated
pysec-2026-579
Malicious code in cmd2func (PyPI)
Unrated
pysec-2026-578
Malicious code in bramin (PyPI)
Unrated
pysec-2026-586
Malicious code in tlask (PyPI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.