Medium
CVE-2026-25604
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2025-69219
Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator
High
CVE-2026-25673
Django vulnerable to Uncontrolled Resource Consumption
Low
CVE-2026-25674
Django has a Race Condition vulnerability
Medium
CVE-2026-28804
pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams
High
CVE-2025-45691
RAGAS has an Arbitrary File Read vulnerability
Medium
CVE-2026-2256
MS-Agent vulnerable to Command Injection
High
CVE-2026-28518
OpenViking contains a Path Traversal vulnerability
High
CVE-2026-28795
OpenChatBI has a Path Traversal Vulnerability in save_report Tool
Low
CVE-2026-29790
dbt-common's commonprefix() doesn't protect against path traversal
High
CVE-2026-27905
BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Medium
CVE-2026-27835
wger: IDOR in RepetitionsConfig and MaxRepetitionsConfig API leak other users' workout data
Low
CVE-2026-27838
wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data
Medium
CVE-2026-27839
wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup
Medium
CVE-2026-27695
zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service
Medium
CVE-2026-27888
pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
Medium
CVE-2026-28351
pypdf: Manipulated RunLengthDecode streams can exhaust RAM
High
CVE-2026-27622
OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write
Medium
CVE-2026-27735
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
Medium
CVE-2026-27794
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
High
CVE-2026-27932
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Low
CVE-2026-27628
pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
Medium
CVE-2026-25138
Rucio WebUI has Username Enumeration via Login Error Message
Medium
CVE-2026-26717
OpenFUN Richie Observable Timing Discrepancy in its sync_course_run_from_request function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.