Medium
CVE-2026-34452
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,334
Reset filters
High
CVE-2026-32727
SciTokens has an Authorization Bypass via Path Traversal in Scope Validation
High
CVE-2026-32716
SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
Critical
ghsa-955r-262c-33jc
Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2
High
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Unrated
pysec-2026-3
Two telnyx versions published containing credential harvesting malware
High
CVE-2026-27893
vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out
Medium
CVE-2026-33682
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
Medium
CVE-2026-25645
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
High
CVE-2026-33497
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
High
CVE-2026-33046
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
High
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
High
CVE-2026-33236
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
High
CVE-2026-33231
Unauthenticated remote shutdown in nltk.app.wordnet_app
Medium
CVE-2026-33230
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
High
CVE-2026-27953
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
High
ghsa-2mhw-8qcg-gr96
skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
Medium
CVE-2026-8445
JustHTML has a Sanitizer Bypass (in Markdown)
Critical
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Critical
CVE-2026-33054
Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
High
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Medium
CVE-2026-32632
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
High
CVE-2026-32611
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
High
CVE-2026-32610
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.