Critical
CVE-2024-2044
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
Low
CVE-2024-28088
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading con
Medium
CVE-2024-26280
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permit
Critical
CVE-2024-2057
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/
Medium
CVE-2024-27906
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.
Medium
CVE-2024-26016
Apache Superset: Improper authorization validation on dashboards and charts import
Critical
CVE-2024-27444
LangChain Experimental vulnerable to arbitrary code execution
Low
CVE-2024-0243
langchain Server-Side Request Forgery vulnerability
Medium
CVE-2024-26152
Summary
High
ghsa-rc4p-p3j9-6577
pypqc private key retrieval vulnerability
High
CVE-2024-26130
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
Critical
CVE-2024-23346
pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string
High
CVE-2024-26134
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a
Critical
CVE-2024-25141
Improper Certificate Validation in apache airflow mongo hook
High
CVE-2024-1647
Pyhtml2pdf version 0.0.6 allows an external attacker to remotely obtain
Low
ghsa-77hh-43cm-v8j6
tuf's Metadata API: Targets.get_delegated_role() is missing input validation
Medium
CVE-2024-21624
NoneBot Potential Information Leak in User-Constructed Message Templates
Low
ghsa-c4cm-r9fh-jgj9
commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Critical
CVE-2024-24563
Vyper negative array index bounds checks
Medium
CVE-2024-0690
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the out
Low
CVE-2024-24559
Vyper sha3 codegen bug
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Low
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Critical
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.