Critical
CVE-2026-47393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
Critical
CVE-2026-45829
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
CVE-2026-25879
Langroid has Prompt to SQL Injection, Leading to RCE
Critical
CVE-2026-42601
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
Critical
CVE-2026-8838
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
Critical
CVE-2026-7813
pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
Critical
CVE-2026-0545
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
Critical
CVE-2026-38360
dash-uploader has a directory traversal vulnerability
Critical
CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Critical
CVE-2023-43654
TorchServe Server-Side Request Forgery vulnerability
Critical
CVE-2023-6020
Ray Missing Authorization vulnerability
Critical
CVE-2023-6021
Ray Path Traversal vulnerability
Critical
CVE-2024-5751
litellm vulnerable to remote code execution based on using eval unsafely
Critical
CVE-2024-34359
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
Critical
CVE-2024-32651
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Critical
CVE-2024-35198
TorchServe vulnerable to bypass of allowed_urls configuration
Critical
CVE-2024-32880
pyLoad allows upload to arbitrary folder lead to RCE
Critical
CVE-2024-2952
LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint
Critical
CVE-2024-2195
Aim Web API vulnerable to Remote Code Execution
Critical
CVE-2025-53890
pyLoad vulnerable to XSS through insecure CAPTCHA
Critical
CVE-2025-54381
BentoML SSRF Vulnerability in File Upload Processing
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Critical
Exploited in attacks
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Critical
CVE-2025-47277
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.