Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2531▼ 362 respecto a la semana anterior
Críticas / altas1338▲ 72 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (6.6) | 0.51% | — | Decode-uri-componentAI | 30/6/2026 | 30/6/2026 | decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately 33s. An attacker… | |
| Modificada | Media (6.5) | 0.89% | — | Decode-uri-component Project Decode-uri-componentElastic Kibana | 8/2/2023 | 17/6/2026 | A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process. | |
| Modificada | Alta (7.5) | 24% | — | Decode-uri-component Project Decode-uri-component | 28/11/2022 | 17/6/2026 | decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. |