Medium
CVE-2023-7333
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Low
CVE-2026-22041
loggingredactor converts non-string types to string types in logs
Medium
CVE-2025-69229
AIOHTTP vulnerable to DoS through chunked messages
Low
CVE-2025-69230
AIOHTTP Vulnerable to Cookie Parser Warning Storm
Medium
CVE-2025-69228
AIOHTTP vulnerable to denial of service through large payloads
Medium
CVE-2025-69227
AIOHTTP vulnerable to DoS when bypassing asserts
Low
CVE-2025-69224
AIOHTTP's unicode processing of header values could cause parsing discrepancies
Low
CVE-2025-69226
AIOHTTP vulnerable to brute-force leak of internal static file path components
Low
CVE-2025-69225
AIOHTTP has unicode match groups in regexes for ASCII protocol elements
High
CVE-2025-71321
Picklescan vulnerable to Arbitrary File Writing
High
CVE-2025-71322
Picklescan Bypasses Unsafe Globals Check using pty.spawn
High
CVE-2025-71320
Picklescan has Incomplete List of Disallowed Inputs
Medium
CVE-2025-71339
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
High
CVE-2025-71323
Picklescan does not block ctypes
Medium
CVE-2025-65713
Home Assistant Core before is vulnerable to Directory Traversal
High
CVE-2025-11157
Feast vulnerable to Deserialization of Untrusted Data
Medium
CVE-2025-67743
Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
High
CVE-2025-67729
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
Low
CVE-2026-21439
badkeys vulnerable to ASCII control character injection on console via malformed input
High
CVE-2025-69223
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Medium
CVE-2025-68480
Marshmallow has DoS in Schema.load(many)
Low
CVE-2025-14881
pretix has Broken Access Control Allowing Cross-User File Access via UUID
Low
CVE-2025-14882
pretix has Broken Access Control Allowing Cross-User File Access via UUID
High
CVE-2025-68279
Weblate has an arbitrary file read via symbolic links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.