Low
CVE-2026-2969
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Low
CVE-2026-2970
datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
High
CVE-2026-53875
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Low
CVE-2026-2654
Hugging Face Smolagents has a Server-Side Request Forgery issue
High
CVE-2025-33253
NVIDIA NeMo Framework Deserializes Untrusted Data
High
CVE-2025-33245
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
High
CVE-2026-1669
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Medium
CVE-2026-26057
Skill-scanner Unsecured Network Binding Vulnerability
Medium
CVE-2026-25905
MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability
Medium
CVE-2026-25904
MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access
Low
CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
High
CVE-2026-25577
Emmett-Core: Unhandled CookieError Exception Causing Denial of Service
Medium
CVE-2026-25198
web2py has an Open Redirect Vulnerability
High
CVE-2026-1707
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
High
CVE-2023-25676
TensorFlow has null dereference on ParallelConcat with XLA
High
CVE-2023-25675
TensorFlow has Segfault in Bincount with XLA
High
CVE-2023-27579
TensorFlow has Floating Point Exception in TFLite in conv kernel
High
CVE-2026-56259
Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution
High
ghsa-h4g2-xfmw-q2c9
Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
High
CVE-2026-73496
mcp-atlassian: Arbitrary server-side file read via attachment upload
Medium
ghsa-9mqm-qcwf-5qhg
CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources
Critical
CVE-2026-59151
Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token,
Medium
CVE-2026-73497
MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)
Medium
CVE-2018-5269
Reachable Assertion in OpenCV.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.