Critical
CVE-2025-67511
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,319
Reset filters
Medium
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Medium
CVE-2025-62608
MLX has heap-buffer-overflow in load()
Critical
CVE-2025-55449
AstrBot is vulnerable to RCE with hard-coded JWT signing keys
Medium
CVE-2025-64429
DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The Duc
High
CVE-2025-64496
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
High
CVE-2025-64495
Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
High
ghsa-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
Low
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Critical
CVE-2025-62515
pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer
Critical
ghsa-m9mp-6x32-5rhg
scio is vunerable to Remote Command Execution through PyTorch
Critical
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
High
CVE-2025-58757
Monai: Unsafe use of Pickle deserialization may lead to RCE
High
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Critical
CVE-2025-58438
internetarchive Vulnerable to Directory Traversal in File.download()
Critical
ghsa-58p5-r2f6-g2cj
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Critical
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Medium
CVE-2025-71364
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
High
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Low
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Medium
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
High
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
High
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.