High
CVE-2024-6851
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 185
Reset filters
Medium
CVE-2024-6577
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
High
CVE-2024-12778
Aim Uncontrolled Resource Consumption vulnerability
Medium
CVE-2024-12777
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
Medium
CVE-2024-6483
Aim Relative Path Traversal vulnerability
High
CVE-2024-10110
Aim Vulnerable to Denial of Service (DoS)
Low
CVE-2024-53861
PyJWT Issuer field partial matches allowed
Medium
CVE-2024-8863
Aim Stored XSS through TEXT EXPLORER
Medium
CVE-2024-6578
Aim Stored Cross-site Scripting Vulnerability
High
CVE-2024-6227
Aim denial of service vulnerability
High
CVE-2024-2196
Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations
High
CVE-2023-41267
Apache HDFS Provider error message suggested
Medium
CVE-2022-3102
jwcrypto token substitution can lead to authentication bypass
Medium
CVE-2026-55646
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
High
CVE-2026-54060
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
Critical
CVE-2024-2195
Aim Web API vulnerable to Remote Code Execution
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Critical
CVE-2024-8769
Aim path traversal in LockManager.release_locks
Critical
CVE-2026-48797
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
Medium
CVE-2026-47155
vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors
Medium
CVE-2026-58203
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size
Medium
ghsa-g75f-g53v-794x
Bleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning
Critical
CVE-2026-44182
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Critical
CVE-2026-44181
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.