Medium
CVE-2025-53539
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filters
Medium
CVE-2025-3263
Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
Medium
CVE-2025-3264
Transformers vulnerable to ReDoS attack through its get_imports() function
Medium
CVE-2025-3262
Transformers vulnerable to ReDoS attack through its SETTING_RE variable
Medium
CVE-2025-48067
OctoPrint vulnerable to possible file extraction via upload endpoints
Low
CVE-2025-47285
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Low
CVE-2025-47774
Vyper's `slice()` may elide side-effects when output length is 0
High
CVE-2025-30202
Data exposure via ZeroMQ on multi-node vLLM deployment
Medium
CVE-2025-1194
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Medium
CVE-2025-46335
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Medium
CVE-2025-46730
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Medium
CVE-2025-46567
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
High
CVE-2025-0190
Aim Excessive Data Query Operations in a Large Data Table vulnerability
High
CVE-2025-0189
Aim Uncontrolled Resource Consumption vulnerability
High
CVE-2024-8061
Aim allows denial of service due to no timeouts for some tracking server endpoints
High
CVE-2024-7760
Aim vulnerable to Cross-Site Request Forgery
High
CVE-2024-6851
Aim Path Traversal vulnerability
Medium
CVE-2024-12720
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
High
CVE-2024-12215
Kedro allows Remote Code Execution by Pulling Micro Packages
High
CVE-2024-12778
Aim Uncontrolled Resource Consumption vulnerability
Medium
CVE-2024-12777
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
High
CVE-2024-12216
GluonCV Arbitrary File Write via TarSlip
High
CVE-2024-10110
Aim Vulnerable to Denial of Service (DoS)
High
CVE-2025-25295
Label Studio has a Path Traversal Vulnerability via image Field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.