Medium
CVE-2026-42080
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2026-42175
requests-hardened is Vulnerable to Server-Side Request Forgery
Medium
CVE-2026-43002
OpenStack Horizon has Incorrect Behavior Order
Low
CVE-2026-42874
Microdot has HTTP response splitting in Response.set_cookie()
Low
CVE-2026-7847
Langchain-Chatchat Uses Insufficiently Random Values
Medium
CVE-2026-42310
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
High
CVE-2025-67796
IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users
Low
CVE-2026-7845
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
Low
CVE-2026-7846
Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
High
CVE-2026-42301
pyp2spec is Vulnerable to Code Injection
Low
CVE-2026-7724
Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
Medium
CVE-2026-7669
SGLang has an Improper Input Validation/Injection Issue
Low
CVE-2026-7597
mem0ai mem0 has an Improper Input Validation Issue
Medium
CVE-2026-7722
Prefect Auth Bypass via endswith() Health Check Exemption
Medium
CVE-2026-7723
Prefect Unauthenticated Event Injection via /api/events/in WebSocket
Low
CVE-2026-7725
Prefect Git Argument Injection in GitRepository Pull Steps
Medium
CVE-2026-7711
MindsDB has an Improper Access Control Issue
High
CVE-2026-42352
pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber
High
CVE-2026-42351
pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider
Medium
CVE-2026-7404
mcpo-simple-server has a Path Traversal issue
Low
CVE-2025-13030
django-mdeditor is Missing Authentication for Critical Function
Medium
CVE-2026-41255
CKAN has CSRF exemption primed by anonymous requests
High
CVE-2026-42031
CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`
Medium
CVE-2026-42032
CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.