Medium
CVE-2026-25905
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Medium
CVE-2026-25904
MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access
Low
CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
High
CVE-2026-25577
Emmett-Core: Unhandled CookieError Exception Causing Denial of Service
Medium
CVE-2026-25198
web2py has an Open Redirect Vulnerability
High
CVE-2026-1707
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
High
CVE-2023-25673
TensorFlow has Floating Point Exception in TensorListSplit with XLA
High
CVE-2023-25676
TensorFlow has null dereference on ParallelConcat with XLA
High
CVE-2023-25675
TensorFlow has Segfault in Bincount with XLA
High
CVE-2023-25658
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
High
CVE-2023-27579
TensorFlow has Floating Point Exception in TFLite in conv kernel
Medium
CVE-2026-49876
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.
Critical
CVE-2026-41041
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino.
High
CVE-2026-56259
Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution
High
ghsa-h4g2-xfmw-q2c9
Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
High
CVE-2026-73496
mcp-atlassian: Arbitrary server-side file read via attachment upload
Medium
ghsa-9mqm-qcwf-5qhg
CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources
Critical
CVE-2026-59151
Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token,
Medium
CVE-2026-73497
MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)
High
CVE-2019-5063
Out-of-bounds Write in OpenCV
Medium
CVE-2018-5268
Out-of-bounds Write in OpenCV.
High
CVE-2019-5064
Out-of-bounds Write in OpenCV
Medium
CVE-2019-16249
Out-of-bounds Read in OpenCV
High
CVE-2019-9423
Out-of-bounds Write in OpenCV
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.