Critical
CVE-2024-32651
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filters
Critical
CVE-2024-32874
Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Critical
CVE-2025-54802
pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Critical
Exploited in attacks
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Critical
CVE-2024-11041
vLLM Deserialization of Untrusted Data vulnerability
Critical
CVE-2025-27520
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
Critical
CVE-2024-9701
Kedro deserialization vulnerability
Medium
ghsa-75mw-h36v-2jv7
Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers
Critical
ghsa-98x5-vq43-vc5p
semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin
Unrated
pysec-2026-236
Malicious code in pyphetools (PyPI)
Unrated
pysec-2026-235
Malicious code in ppkt2synergy (PyPI)
Unrated
pysec-2026-234
Malicious code in phenopacket-store-toolkit (PyPI)
Critical
CVE-2026-55166
Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise
Medium
CVE-2026-77088
justhtml: to_markdown() code-span blank-line breakout enables XSS
Unrated
pysec-2026-233
Malicious code in gpsea (PyPI)
Unrated
pysec-2026-231
Malicious code in embiggen (PyPI)
Unrated
pysec-2026-232
Malicious code in ensmallen (PyPI)
High
CVE-2026-54317
Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN
High
CVE-2026-55446
Langflow: Unauthenticated DoS through multipart form boundary file upload
Critical
CVE-2026-48519
Langflow: Unauthenticated RCE in Shareable Playgrounds
Medium
CVE-2026-41479
Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type
High
CVE-2026-54293
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
Low
CVE-2026-54280
aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.