Unrated
pysec-2026-1074
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filters
Unrated
pysec-2026-1073
Malicious code in orchestr8-platform (PyPI)
Unrated
pysec-2026-1072
Malicious code in openai-mcp (PyPI)
Unrated
pysec-2026-1071
Malicious code in mem8 (PyPI)
Unrated
pysec-2026-1070
Malicious code in langchain-core-mcp (PyPI)
High
CVE-2025-62349
Salt Authentication Protocol Version Downgrade Allows Minion Impersonation
High
CVE-2025-62348
Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload
High
CVE-2026-40036
Unfurl's unbounded zlib decompression allows decompression bomb DoS
High
CVE-2026-24123
BentoML has a Path Traversal via Bentofile Configuration
High
CVE-2026-24490
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
High
CVE-2026-24780
AutoGPT is Vulnerable to RCE via Disabled Block Execution
High
CVE-2026-23490
pyasn1 has a DoS vulnerability in decoder
High
CVE-2026-24049
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
High
CVE-2026-22033
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
High
CVE-2026-22609
Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist
High
CVE-2026-22606
Fickling has a bypass via runpy.run_path() and runpy.run_module()
High
CVE-2026-22607
Fickling Blocklist Bypass: cProfile.run()
High
CVE-2026-22608
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
High
CVE-2026-22612
Fickling vulnerable to detection bypass due to "builtins" blindness
Medium
CVE-2026-21872
NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links
Medium
CVE-2026-21871
NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace()
Medium
CVE-2025-69228
AIOHTTP vulnerable to denial of service through large payloads
High
CVE-2025-71321
Picklescan vulnerable to Arbitrary File Writing
High
CVE-2025-71322
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.