Medium
CVE-2025-54121
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,336
Reset filters
High
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Medium
CVE-2023-51232
Dagster vulnerable to Path Traversal attack through its /logs endpoint
Low
CVE-2025-3777
Transformers's Improper Input Validation vulnerability can be exploited through username injection
High
CVE-2025-53365
MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service
High
CVE-2025-53366
MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS
Medium
CVE-2025-22242
Salt's worker process vulnerable to denial of service through file read operation
High
CVE-2025-53002
LLaMA-Factory allows Code Injection through improper vhead_file safeguards
Medium
CVE-2025-48944
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
Medium
CVE-2025-48994
SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
High
CVE-2025-30165
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Low
CVE-2025-47774
Vyper's `slice()` may elide side-effects when output length is 0
High
CVE-2025-30370
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
High
CVE-2024-32982
Litestar and Starlite vulnerable to Path Traversal
Medium
CVE-2024-6577
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
High
CVE-2024-12215
Kedro allows Remote Code Execution by Pulling Micro Packages
High
CVE-2024-12216
GluonCV Arbitrary File Write via TarSlip
High
CVE-2025-25297
Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
High
CVE-2025-25295
Label Studio has a Path Traversal Vulnerability via image Field
High
CVE-2024-53981
Denial of service (DoS) via deformation `multipart/form-data` boundary
Medium
CVE-2023-34049
Salt preflight script could be attacker controlled
High
CVE-2024-51998
changedetection.io path traversal using file URI scheme without supplying hostname
Medium
CVE-2024-9902
ansible-core Incorrect Authorization vulnerability
High
CVE-2024-47874
Starlette Denial of service (DoS) via multipart/form-data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.