Medium
CVE-2025-71352
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filters
Medium
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
Medium
CVE-2025-71369
Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers
Medium
CVE-2025-71350
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run
Medium
CVE-2025-71356
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
Medium
CVE-2025-71353
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get
Medium
CVE-2025-71366
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile
Medium
CVE-2025-55672
Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability
Medium
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Medium
CVE-2025-50481
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a
Medium
CVE-2025-3108
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
Medium
CVE-2025-6050
Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function
Medium
CVE-2025-28380
A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter.
Medium
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Medium
CVE-2025-48889
Gradio Allows Unauthorized File Copy via Path Manipulation
High
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
High
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
High
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Medium
CVE-2025-71355
Picklescan failed to detect to some unsafe global function in Numpy library
High
CVE-2024-7983
Open WebUI denial of service through endpoint for converting markdown
High
CVE-2024-8053
Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
High
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
Medium
CVE-2025-0191
A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filena
Medium
CVE-2024-10955
A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.