Medium
CVE-2026-6608
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2026-6607
FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)
Low
CVE-2026-6599
Langflow vulnerable to injection
Low
CVE-2026-6598
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
Low
CVE-2026-6597
Langflow has an Information Leak through Incomplete API Key Redaction
Medium
CVE-2026-6596
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Medium
CVE-2026-6604
AgentScope vulnerable to Server-Side Request Forgery
Medium
CVE-2026-40948
apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation
Medium
CVE-2026-6605
AgentScope vulnerable to Server-Side Request Forgery
Medium
CVE-2026-6603
AgentScope Vulnerable to Remote Code Injection
High
CVE-2026-41490
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
Medium
CVE-2026-41314
pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
Medium
CVE-2026-41312
pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
Medium
CVE-2026-41313
pypdf: Possible long runtimes for wrong size values in incremental mode
Low
CVE-2026-35402
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures
Medium
CVE-2026-40602
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates
High
CVE-2026-40474
wger has Broken Access Control in Global Gym Configuration Update Endpoint
Medium
CVE-2026-40353
wger has Stored XSS via Unescaped License Attribution Fields
Medium
CVE-2026-40347
python-multipart affected by Denial of Service via large multipart preamble or epilogue data
Critical
CVE-2026-54334
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen
Critical
CVE-2026-54333
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable
Medium
CVE-2026-41206
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code
Medium
CVE-2026-40260
pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
Medium
CVE-2026-41168
pypdf has long runtimes for wrong size values in cross-reference and object streams
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.