High
CVE-2025-61784
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filters
High
CVE-2025-59420
Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
High
CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
High
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
High
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
High
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Medium
CVE-2025-55673
Apache Superset data query improperly discloses database schema information to low-privileged guest user
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
Low
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
High
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
High
CVE-2025-54413
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
High
CVE-2025-54365
FastAPI Guard has a regex bypass
Medium
CVE-2025-55013
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Medium
CVE-2025-53539
fastapi-guard is vulnerable to ReDoS through inefficient regex
Medium
CVE-2025-3262
Transformers vulnerable to ReDoS attack through its SETTING_RE variable
Medium
CVE-2025-48944
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
High
CVE-2025-30165
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Medium
CVE-2025-46335
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Medium
CVE-2025-46567
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
High
CVE-2025-46726
Langroid Allows XXE Injection via XMLToolMessage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.