High
CVE-2026-2653
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Medium
CVE-2026-2415
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}
High
CVE-2026-2531
A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the component File Upload. Such
Medium
ghsa-27jp-wm6q-gp25
sqlparse: formatting list of tuples leads to denial of service
Medium
CVE-2025-33042
Apache Avro Java SDK is Vulnerable to Code Injection
Medium
CVE-2019-25338
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames t
Critical
CVE-2026-26217
Crawl4AI Has Local File Inclusion in Docker API via file:// URLs
Critical
CVE-2026-26216
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
High
CVE-2026-25990
Pillow affected by out-of-bounds write when loading PSD images
High
CVE-2026-26007
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Critical
CVE-2026-21531
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Medium
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Medium
CVE-2026-25480
Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)
Medium
CVE-2026-25479
Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns
High
CVE-2026-25478
Litestar's CORS origin allowlist has a bypass due to unescaped regex metacharacters in allowed origins
Medium
CVE-2026-24098
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users
Medium
CVE-2026-22922
Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access
Critical
CVE-2026-1709
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows un
Medium
CVE-2026-25516
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content
High
CVE-2026-25732
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write
Critical
ghsa-4f84-67cv-qrv3
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
High
CVE-2026-25640
Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
Critical
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.