Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersdrupal/tealiumiq - SA-CONTRIB-2026-064
Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission
Tiptap contains an input validation vulnerability resulting in DoS
drupal/salesforce - SA-CONTRIB-2026-063
drupal/geolocation - SA-CONTRIB-2026-062
drupal/paragraphs - SA-CONTRIB-2026-061
drupal/paragraphs - SA-CONTRIB-2026-060
drupal/wisski - SA-CONTRIB-2026-059
drupal/commerce_realex - SA-CONTRIB-2026-058
drupal/ai_agents - SA-CONTRIB-2026-057
drupal/ai_agents - SA-CONTRIB-2026-056
drupal/ai - SA-CONTRIB-2026-055
drupal/ai - SA-CONTRIB-2026-054
drupal/ai_provider_openai - SA-CONTRIB-2026-053
drupal/admin_feedback - SA-CONTRIB-2026-052
drupal/admin_feedback - SA-CONTRIB-2026-051
Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
Snipe-IT has Improper Authorization in File Deletion (IDOR)
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
Snipe-IT has a 2FA reset privilege bypass
Snipe-IT Vulnerable to User Account Escalation via CSV Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.