High
ghsa-8mgg-5x65-m4m4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2018-17145
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
Low
CVE-2020-15168
The `size` option isn't honored after following a redirect in node-fetch
Medium
CVE-2020-24660
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Low
ghsa-vpgc-7h78-gx8f
personnummer/js vulnerable to Improper Input Validation
High
ghsa-5vj8-3v2h-h38v
Remote Code Execution in next
High
CVE-2020-36649
Regular Expression Denial of Service in papaparse
High
ghsa-rhc3-76jw-4f2x
Denial of Service in @commercial/ammo
Critical
CVE-2019-0219
Privilege Escalation in cordova-plugin-inappbrowser
Low
ghsa-22h7-7wwg-qmgg
Prototype Pollution in @hapi/hoek
High
ghsa-5ff8-jcf9-fw62
Cross-Site Scripting in markdown-it-katex
Critical
ghsa-rjvj-673q-4hfw
Command Injection in traceroute
High
ghsa-q643-w9jp-q2qg
Hardcoded Initialization Vector in parsel
Medium
ghsa-2ggq-vfcp-gwhj
Cross-Site Scripting in @hapi/boom
Critical
ghsa-49mg-94fc-2fx6
Command Injection in npm-git-publish
Critical
ghsa-qcff-ffx3-m25c
Command Injection in meta-git
Critical
ghsa-7wgh-5q4q-6wx5
Malicious Package in 1337qq-js
Critical
ghsa-v66p-w7qx-wv98
Authentication Bypass in express-laravel-passport
High
ghsa-25v4-mcx4-hh35
Cross-Site Scripting in atlasboard-atlassian-package
Critical
ghsa-97mg-3cr6-3x4c
Remote Code Execution in mongodb-query-parser
Critical
ghsa-7r9x-hr76-jr96
Command Injection in giting
High
ghsa-r4m5-47cq-6qg8
Server-Side Request Forgery in ftp-srv
Critical
CVE-2019-19723
Improper Authorization in passport-cognito
Critical
ghsa-65xx-c85x-wg76
Command Injection in plotter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.