Low
ghsa-pg98-6v7f-2xfv
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Low
ghsa-457r-cqc8-9vj9
sweetalert2 v10.16.10 and above contains hidden functionality
Low
ghsa-qq6h-5g6j-q3cm
sweetalert2 v11.4.9 and above contains hidden functionality
Medium
CVE-2022-4111
ToolJet is vulnerable to Denial of Service (DoS)
Medium
CVE-2022-41919
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
Medium
ghsa-98pf-gfh3-x3mp
Read the Docs vulnerable to Cross-Site Scripting (XSS)
High
ghsa-3qmc-2r76-4rqp
Redwood is vulnerable to account takeover via dbAuth "forgot-password"
High
CVE-2022-41879
Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks
Medium
CVE-2022-36077
Exfiltration of hashed SMB credentials on Windows via file:// redirect
High
CVE-2022-41878
Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers
Critical
CVE-2022-39396
Remote code execution via MongoDB BSON parser through prototype pollution
High
CVE-2022-39386
fastify/websocket vulnerable to uncaught exception via crash on malformed packet
Medium
CVE-2022-41710
Markdownify has Files or Directories Accessible to External Parties
Critical
CVE-2022-39382
@keystone-6/core's NODE_ENV defaults to development with esbuild
Medium
ghsa-8r69-3cvp-wxc3
Batched HTTP requests may set incorrect `cache-control` response header
High
CVE-2022-39381
Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
Critical
CVE-2022-39353
xmldom allows multiple root nodes in a DOM
Medium
CVE-2022-3783
node-red-dashboard vulnerable to Cross-site Scripting
High
CVE-2022-25892
muhammara and hummus vulnerable to denial of service by NULL pointer dereference
Critical
CVE-2022-2422
feathers-sequelize contains improper input validation leading to SQL injection
High
CVE-2022-25918
Inefficient Regular Expression Complexity in shescape
Medium
CVE-2022-39350
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
Low
ghsa-whpx-q3rq-w8jc
Hardening of TypedArrays with non-canonical numeric property names in SES
Critical
CVE-2022-39322
Field-level access-control bypass for multiselect field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.