Unrated
pysec-2026-605
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filters
Unrated
pysec-2026-604
Malicious code in napari-ufish (PyPI)
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Unrated
pysec-2026-594
Malicious code in mrbios (PyPI)
Unrated
pysec-2026-593
Malicious code in magique-ai (PyPI)
Unrated
pysec-2026-592
Malicious code in magique (PyPI)
Unrated
pysec-2026-591
Malicious code in funcdesc (PyPI)
Unrated
pysec-2026-590
Malicious code in executor-http (PyPI)
Unrated
pysec-2026-589
Malicious code in executor-engine (PyPI)
Unrated
pysec-2026-580
Malicious code in coolbox (PyPI)
Unrated
pysec-2026-579
Malicious code in cmd2func (PyPI)
Unrated
pysec-2026-578
Malicious code in bramin (PyPI)
Unrated
pysec-2026-586
Malicious code in tlask (PyPI)
Unrated
pysec-2026-584
Malicious code in rlask (PyPI)
Unrated
pysec-2026-583
Malicious code in nhmpy (PyPI)
Unrated
pysec-2026-582
Malicious code in mflux-streamlit (PyPI)
Unrated
pysec-2026-585
Malicious code in spateo-release (PyPI)
Unrated
pysec-2026-581
Malicious code in dynamo-release (PyPI)
Critical
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Critical
CVE-2026-44727
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Critical
CVE-2026-22778
vLLM has RCE In Video Processing
Critical
CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Critical
CVE-2024-5751
litellm vulnerable to remote code execution based on using eval unsafely
Critical
CVE-2024-34359
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.