Medium
CVE-2025-62707
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2025-62708
pypdf can exhaust RAM via manipulated LZWDecode streams
High
CVE-2025-8709
LangGraph's SQLite store implementation has a SQL Injection Vulnerability
High
CVE-2025-64104
LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore
Medium
CVE-2025-10282
BBOT's gitlab.py exposes globally configured "gitlab" API key
High
CVE-2025-62611
aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server
High
CVE-2025-61773
pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters
Medium
CVE-2025-11844
Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function
Medium
CVE-2025-61911
python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
Medium
CVE-2025-61912
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
High
CVE-2025-62172
Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name
Medium
CVE-2025-61783
Python Social Auth - Django has unsafe account association
Medium
CVE-2025-62607
Nautobot Single Source of Truth (SSoT) has an unauthenticated ServiceNow configuration URL
Low
CVE-2025-62379
reflex-dev/reflex has an Open Redirect vulnerability
Medium
CVE-2025-61672
Synapse's invalid device keys degrade federation functionality
High
CVE-2025-7707
llama-index has Insecure Temporary File
Medium
CVE-2025-10281
BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver
High
CVE-2025-61920
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Low
CVE-2025-59682
Django vulnerable to partial directory traversal via archives
High
CVE-2025-59425
vLLM is vulnerable to timing attack at bearer auth
Medium
CVE-2025-8406
ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Medium
CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Medium
CVE-2025-57275
SPDK is vulnerable to buffer overflow in the NVMe-oF target component
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.