High
CVE-2026-10108
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
Medium
CVE-2026-47183
zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion
Medium
CVE-2026-47184
zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood
Medium
CVE-2026-47180
zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service
Medium
CVE-2026-46380
compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem
High
CVE-2026-46439
compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)
Medium
CVE-2026-45774
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
Medium
CVE-2026-46526
local-deep-research has an SSRF bypass in `safe_get`
High
CVE-2026-42305
Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows
High
CVE-2026-46345
compliance-trestle - jinja has an Arbitrary File Write via Path Traversal
High
CVE-2026-10105
agno contains a SQL injection vulnerability
Medium
CVE-2026-9540
vllm has Improper Resource Shutdown or Release
Low
CVE-2026-9712
pretix vulnerable to Authorization Bypass Through User-Controlled Key
High
CVE-2026-48544
Taipy contains a path traversal vulnerability
High
CVE-2026-45725
compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal
Medium
CVE-2026-45309
AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username
Medium
CVE-2026-46745
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability
Medium
CVE-2026-46645
SQLAdmin: Authorization Bypass on `ajax_lookup`
High
CVE-2026-47102
LiteLLM allows a user to modify their own user_role via the /user/update endpoint
Medium
CVE-2026-9368
hermes-agent has a sandbox issue
Medium
CVE-2026-46715
Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance
Medium
CVE-2026-47157
aiograpi: Unsafe signup challenge path handling
Low
CVE-2026-46497
Crawlee for Python: SSRF via sitemap-derived URLs
Medium
CVE-2026-46561
pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.