Medium
CVE-2026-25736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2026-27469
Isso affected by Stored XSS via comment website field
High
CVE-2026-25733
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
High
CVE-2026-25136
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Medium
CVE-2026-25735
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
High
CVE-2024-56373
Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table
Medium
CVE-2025-65995
Apache Airflow error reporting may expose full kwargs
Medium
CVE-2025-27555
Apache Airflow exposes sensitive information in its log files
High
CVE-2026-26331
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
High
CVE-2026-2033
MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
High
CVE-2026-2472
Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
High
CVE-2026-2473
Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
High
CVE-2026-27194
D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
Low
CVE-2026-2969
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
Low
CVE-2026-2970
datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
Medium
CVE-2026-27025
pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
Medium
CVE-2026-27026
pypdf possibly has long runtimes for malformed FlateDecode streams
Medium
CVE-2026-27024
pypdf has a possible infinite loop when processing TreeObject
High
CVE-2026-53875
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Low
CVE-2026-2654
Hugging Face Smolagents has a Server-Side Request Forgery issue
High
CVE-2025-33253
NVIDIA NeMo Framework Deserializes Untrusted Data
High
CVE-2025-33245
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
High
CVE-2026-24708
OpenStack Nova calls qemu-img without format restrictions for resize
High
CVE-2026-1669
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.