Low
CVE-2024-51210
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2024-54134
Modified package published to npm, containing malware that exfiltrates private key material
Medium
CVE-2024-52810
@intlify/shared Prototype Pollution vulnerability
Medium
CVE-2024-52809
vue-i18n has cross-site scripting vulnerability with prototype pollution
Medium
CVE-2024-53843
@dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling
High
CVE-2024-32965
@lobehub/chat Server Side Request Forgery vulnerability
Low
CVE-2024-53261
@sveltejs/kit vulnerable to XSS on dev mode 404 page
Low
CVE-2024-53262
@sveltejs/kit has unescaped error message included on error page
Medium
ghsa-pqhp-25j4-6hq9
smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables
High
CVE-2024-58351
Flowise OverrideConfig security vulnerability
High
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Medium
CVE-2024-50336
matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal
Medium
CVE-2024-51434
Froala WYSIWYG editor allows cross-site scripting (XSS)
High
CVE-2024-49770
Path traversal in oak allows transfer of hidden files within the served root directory
Medium
CVE-2024-7774
Langchain Path Traversal vulnerability
Low
CVE-2024-7042
@langchain/community SQL Injection vulnerability
Medium
CVE-2024-50611
CycloneDX cdxgen may execute code contained within build-related files
Medium
CVE-2020-26311
useragent Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26303
insane vulnerable to Regular Expression Denial of Service
Medium
CVE-2020-26304
Foundation Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26305
CommonRegexJS Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26309
nope-validator Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26308
validate.js Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26306
Knwl.js Regular Expression Denial of Service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.