Medium
CVE-2024-26149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,333
Reset filters
High
CVE-2024-26134
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a
Low
ghsa-77hh-43cm-v8j6
tuf's Metadata API: Targets.get_delegated_role() is missing input validation
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Low
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Critical
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Medium
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
Medium
CVE-2023-51702
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
Medium
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
High
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Unrated
pysec-2024-1
gratient 0.5 contains credential harvesting code
Medium
CVE-2023-51663
Hail relies on OIDC email claims to verify the validity of a user's domain.
High
CVE-2023-50731
GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182
Medium
ghsa-4h72-34j6-j8x7
Maloja error page XSS vulnerability
Medium
ghsa-hfmc-7525-mj55
AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC
Critical
CVE-2023-6569
External Control of File Name or Path in h2oai/h2o-3
High
ghsa-7vwr-g6pm-9hc8
Cookie leakage between different users in fastapi-proxy-lib
Critical
ghsa-x563-6hqv-26mr
Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file
Medium
CVE-2023-47627
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
High
CVE-2023-46446
AsyncSSH Rogue Session Attack
Medium
CVE-2023-46445
AsyncSSH Rogue Extension Negotiation
High
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Medium
CVE-2023-47037
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.
Medium
CVE-2023-46136
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.