High
CVE-2025-62348
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
High
CVE-2026-0599
Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2025-6208
llama-index-core vulnerable to Uncontrolled Resource Consumption
Low
CVE-2026-25211
Llama Stack exposes secret in initialization log
High
CVE-2026-40036
Unfurl's unbounded zlib decompression allows decompression bomb DoS
High
CVE-2026-1117
Lollms has an Improper Access Control vulnerability
High
CVE-2026-24779
vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector
High
CVE-2026-24486
Python-Multipart has Arbitrary File Write via Non-Default Configuration
High
CVE-2026-0994
protobuf affected by a JSON recursion depth bypass
High
CVE-2026-1260
Sentencepiece has a a heap overflow issue
Low
CVE-2026-24408
sigstore CSRF possibility in OIDC authentication during signing
Medium
CVE-2026-24688
pypdf has possible Infinite Loop when processing outlines/bookmarks
High
CVE-2026-24123
BentoML has a Path Traversal via Bentofile Configuration
Medium
CVE-2026-23892
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
Medium
CVE-2026-1213
askbot inexhaustive permissions check allows any user to modify a different user's profile picture
High
CVE-2026-24490
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
Medium
CVE-2025-11687
GI-DocGen vulnerable to Reflected XSS via unescaped query strings
Medium
CVE-2026-24489
Gakido vulnerable to HTTP Header Injection (CRLF Injection)
High
Exploited in attacks
CVE-2026-0770
Langflow affected by Remote Code Execution via validate_code() exec()
High
CVE-2026-24780
AutoGPT is Vulnerable to RCE via Disabled Block Execution
Medium
CVE-2026-23946
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Medium
CVE-2026-23877
Swing Music has a Directory Traversal & Filesystem can be accessed by a non-admin user
High
CVE-2026-23490
pyasn1 has a DoS vulnerability in decoder
Medium
CVE-2025-71176
pytest has vulnerable tmpdir handling
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.