Medium
CVE-2026-61455
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-61704
link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Medium
CVE-2026-3852
Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter
Unrated
CVE-2026-84921
drupal/webform_submissions_delete - SA-CONTRIB-2026-133
Unrated
CVE-2026-84920
drupal/unpublished_node_permissions - SA-CONTRIB-2026-132
Unrated
CVE-2026-84919
drupal/photoswipe - SA-CONTRIB-2026-131
Unrated
CVE-2026-84918
drupal/monobank - SA-CONTRIB-2026-130
Unrated
CVE-2026-81163
drupal/media_library_importer - SA-CONTRIB-2026-129
Unrated
CVE-2026-16648
drupal/symfony_mailer_log - SA-CONTRIB-2026-128
Unrated
CVE-2026-84917
drupal/jsonapi_role_access - SA-CONTRIB-2026-127
Unrated
CVE-2026-84916
drupal/islandora - SA-CONTRIB-2026-126
Unrated
CVE-2026-84924
drupal/otp_verification - SA-CONTRIB-2026-125
Unrated
CVE-2026-84923
drupal/otp_verification - SA-CONTRIB-2026-124
Unrated
CVE-2026-84915
drupal/component_blocks - SA-CONTRIB-2026-123
Unrated
CVE-2026-84914
drupal/calculate_working_days - SA-CONTRIB-2026-122
Unrated
CVE-2026-84913
drupal/ai_translate - SA-CONTRIB-2026-121
Unrated
CVE-2026-84912
drupal/ai - SA-CONTRIB-2026-120
Unrated
CVE-2026-84911
drupal/ai - SA-CONTRIB-2026-119
Unrated
CVE-2026-84910
drupal/advanced_search - SA-CONTRIB-2026-118
Medium
CVE-2026-2573
GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
High
CVE-2026-75931
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
High
CVE-2026-75975
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
High
CVE-2026-75899
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
High
CVE-2026-76172
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.