Medium
CVE-2025-58162
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
High
CVE-2025-57808
ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Medium
CVE-2025-58068
Eventlet affected by HTTP request smuggling in unparsed trailers
High
CVE-2025-5302
LlamaIndex affected by a Denial of Service (DOS) in JSONReader
Medium
CVE-2025-55673
Apache Superset data query improperly discloses database schema information to low-privileged guest user
Medium
CVE-2025-55675
Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access
High
CVE-2025-57809
XGrammar affected by Denial of Service by infinite recursion grammars
High
CVE-2025-48956
vllm API endpoints vulnerable to Denial of Service Attacks
High
CVE-2025-57751
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
Medium
CVE-2025-57804
h2 allows HTTP Request Smuggling due to illegal characters in headers
Medium
CVE-2025-54791
OMERO.web displays unecessary user information when requesting password reset
Medium
CVE-2025-55214
Copier's safe template has filesystem write access outside destination path
High
CVE-2025-9141
vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder
High
CVE-2025-55201
Copier's safe template has arbitrary filesystem read/write access
Medium
CVE-2025-55197
PyPDF's Manipulated FlateDecode streams can exhaust RAM
Medium
CVE-2025-5197
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Medium
CVE-2025-55149
TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
High
CVE-2025-54886
SKOPS Card.get_model happily allows arbitrary code execution
High
CVE-2025-55156
PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
High
CVE-2025-54796
copyparty allows Regex Denial of Service (ReDoS) in the upload listing
Medium
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Medium
CVE-2025-53009
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.