High
CVE-2026-33744
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 116
Reset filters
High
CVE-2026-27953
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
High
CVE-2026-27696
changedetection.io is Vulnerable to SSRF via Watch URLs
Low
CVE-2025-62780
changedetection.io: Stored XSS in Watch update via API
Critical
CVE-2023-25574
LTI JupyterHub Authenticator does not properly validate JWT Signature
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
High
CVE-2023-36053
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large numb
High
CVE-2022-31006
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
High
CVE-2008-6547
schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.
High
CVE-2015-5144
Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP r
High
CVE-2015-5145
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
High
CVE-2021-45115
Denial-of-service in Django
High
CVE-2021-38305
Command injection in Yamale
High
CVE-2021-33571
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Medium
CVE-2021-29510
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Medium
CVE-2021-32052
Header injection possible in Django
High
CVE-2020-15225
Potential DoS with NumberFilter conversion to integer values.
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
High
CVE-2019-19588
Uncontrolled resource consumption in validators Python package
High
CVE-2017-18361
Pylons Colander Denial of Service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.