High
ghsa-5ccf-884p-4jjq
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
High
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Medium
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
Critical
CVE-2025-71338
Flowise allows arbitrary file write to RCE
Critical
CVE-2025-29775
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Critical
CVE-2025-29774
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
Critical
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
High
CVE-2025-25975
Prototype Pollution Vulnerability in parse-git-config
Medium
CVE-2025-27789
Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
High
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
High
CVE-2025-27597
Vue I18n Allows Prototype Pollution in `handleFlatJson`
High
CVE-2025-27152
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
Medium
CVE-2025-27506
NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page
High
CVE-2025-26319
FlowiseAI Flowise arbitrary file upload vulnerability
Medium
CVE-2025-27408
Manifest Uses a One-Way Hash without a Salt
Medium
CVE-2024-53382
PrismJS DOM Clobbering vulnerability
Medium
CVE-2024-53386
Stage.js DOM Clobbering vulnerabilty
High
CVE-2025-1756
mongosh vulnerable to local privilege escalation
Low
CVE-2025-27146
Matrix IRC Bridge allows IRC command injection to own puppeted user
High
CVE-2025-27108
DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace
High
CVE-2025-71403
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
Medium
CVE-2025-27143
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
Medium
CVE-2025-25299
Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.