Low
CVE-2026-47716
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2026-53954
Bugsink: DOS using large numbers of event tags
Medium
CVE-2026-47728
Bugsink: Project scoping missing in sourcemap and debug-file lookup
Low
CVE-2024-24769
Vantage6: No limit on emails sent for password/MFA reset
Medium
CVE-2024-27928
Vantage6: 2FA can be circumvented with hacked email access
High
CVE-2026-47419
praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR
Low
CVE-2026-10692
Code Index MCP is vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2026-47117
OpenMed vulnerable to remote code injection through privacy-filter model loading path
Medium
CVE-2026-43980
malla: Stored XSS via Meshtastic node names in multiple frontend pages
Low
CVE-2026-47192
kas's late signature validation may allow unnoticed repository manipulations
High
CVE-2026-44023
Docling Core: Unsafe remote filename resolution
High
CVE-2026-44019
Docling Core: Insufficient validation of image reference URIs
Low
CVE-2026-10566
FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content()
High
CVE-2026-47415
praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR
Medium
CVE-2026-47411
praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}
High
CVE-2026-47412
praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}
High
CVE-2026-47418
praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR
High
CVE-2026-47417
praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR
Low
CVE-2026-10300
SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of Dervice
Medium
CVE-2026-47425
rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Low
CVE-2026-47191
kas checks out SHA-like git branches as valid commits
High
CVE-2026-47397
PraisonAI has an Arbitrary File Write in Python API
High
CVE-2026-47409
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role
High
CVE-2026-47405
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.