High
CVE-2026-87996
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
High
CVE-2026-87999
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
Medium
CVE-2026-88005
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
Medium
CVE-2026-50221
OpenStack Swift vulnerable to authenticated server-side request forgery
Low
CVE-2026-12796
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
Critical
CVE-2026-56104
Chainlit contains a session hijacking vulnerability
High
CVE-2025-66336
Apache Doris MCP Server is vulnerable to SQL Injection via metadata query path
Medium
CVE-2026-9073
foreman-mcp-server Inserts Sensitive Information into Log File
Low
CVE-2026-12797
BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints
Low
CVE-2026-12771
LiteLLM: M2M JWT Handler Has Improper Authorization
Low
CVE-2026-12799
BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure
Medium
CVE-2026-12773
LiteLLM: MCP Proxy Has Improper Authentication
Low
CVE-2026-12798
BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader
Medium
CVE-2026-12795
LiteLLM: SSO Debug Flow Has Improper Authentication
Critical
CVE-2026-56315
PickleScan has multiple stdlib modules with direct RCE not in blocklist
Low
CVE-2026-12772
LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration
Low
CVE-2026-12770
LiteLLM: Admin Key Handler Has Improper Authorization
High
CVE-2025-71365
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval
High
CVE-2025-71370
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper
Medium
CVE-2025-71351
Picklescan missing detection when calling built-in python library function timeit.timeit()
High
CVE-2025-71376
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions
High
CVE-2025-71341
Picklescan has a missing detection when calling built-in python profile.Profile.runctx
Medium
CVE-2026-102830
JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
Medium
CVE-2026-102904
JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.