Medium
CVE-2025-58337
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
CVE-2025-64184
Dosage vulnerable to a Directory Traversal through crafted HTTP responses
Medium
CVE-2025-12058
Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
Medium
CVE-2025-64100
CKAN vulnerable to fixed session IDs
Medium
CVE-2025-62801
FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
Medium
CVE-2025-62800
FastMCP vulnerable to reflected XSS in client's callback page
Medium
CVE-2025-10282
BBOT's gitlab.py exposes globally configured "gitlab" API key
High
CVE-2025-62611
aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server
High
CVE-2025-61773
pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters
Medium
CVE-2025-61912
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Low
CVE-2025-62379
reflex-dev/reflex has an Open Redirect vulnerability
Medium
CVE-2025-61672
Synapse's invalid device keys degrade federation functionality
Medium
CVE-2025-10281
BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver
High
CVE-2025-61920
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
High
CVE-2025-59425
vLLM is vulnerable to timing attack at bearer auth
Medium
CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
High
CVE-2025-59152
Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion
Medium
CVE-2025-61620
vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server
High
CVE-2025-6242
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
Medium
CVE-2025-53354
NiceGUI has a Reflected XSS
High
CVE-2025-61784
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Medium
CVE-2025-10952
ml-logger file handler allows reading arbitrary files
Medium
CVE-2025-10951
ml-logger has path traversal in the file argument
Low
CVE-2025-10950
ml-logger deserialization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.