Critical
CVE-2025-14009
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filters
High
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Medium
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Medium
CVE-2026-24098
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users
Critical
CVE-2026-40035
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
High
CVE-2024-58340
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
Medium
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Medium
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Medium
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Low
CVE-2025-63396
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do
High
CVE-2025-57106
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing
High
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Low
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Critical
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
High
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
High
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Critical
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Medium
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Medium
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Medium
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
High
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Low
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Medium
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.