High
CVE-2026-42563
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
High
CVE-2026-46345
compliance-trestle - jinja has an Arbitrary File Write via Path Traversal
High
CVE-2026-10105
agno contains a SQL injection vulnerability
Medium
CVE-2026-9540
vllm has Improper Resource Shutdown or Release
High
CVE-2026-49017
OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body
Low
CVE-2026-9712
pretix vulnerable to Authorization Bypass Through User-Controlled Key
High
CVE-2026-48544
Taipy contains a path traversal vulnerability
High
CVE-2026-45725
compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal
Low
CVE-2026-9369
hermes-agent has an Incorrect Comparison
Medium
CVE-2026-45309
AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username
Medium
CVE-2026-46745
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability
Medium
CVE-2026-46645
SQLAdmin: Authorization Bypass on `ajax_lookup`
High
CVE-2026-3515
Prefect has an Argument Injection issue
High
CVE-2026-47102
LiteLLM allows a user to modify their own user_role via the /user/update endpoint
Medium
CVE-2026-9366
hermes-agent has an Injection issue
Medium
CVE-2026-9368
hermes-agent has a sandbox issue
Medium
CVE-2026-9353
hermes-agent has an Injection issue
Medium
CVE-2026-46715
Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance
Medium
CVE-2026-47157
aiograpi: Unsafe signup challenge path handling
Critical
CVE-2026-48207
Apache Fory PyFory Deserialization of Untrusted Data
Low
CVE-2026-46497
Crawlee for Python: SSRF via sitemap-derived URLs
Medium
CVE-2026-46561
pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls API
High
CVE-2026-46517
lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out
High
CVE-2026-47101
LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.