High
ghsa-mwv6-3258-q52c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 543
Reset filters
Low
CVE-2025-67716
Improper Validation of Query Parameters in Auth0 Next.js SDK
Medium
CVE-2025-67490
Improper Request Caching Lookup in the Auth0 Next.js SDK
Critical
ghsa-9qr9-h5gf-34mp
Next.js is vulnerable to RCE in React flight protocol
High
CVE-2025-66020
Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
Medium
CVE-2025-65944
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
High
CVE-2025-64762
authkit-nextjs may let session cookies be cached in CDNs
Medium
CVE-2025-64765
Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values
Medium
CVE-2025-64525
Astro vulnerable to URL manipulation via headers, leading to middleware and CVE-2025-61925 bypass
Medium
ghsa-5jpx-9hw9-2fx4
NextAuthjs Email misdelivery Vulnerability
High
CVE-2025-62427
Angular SSR has a Server-Side Request Forgery (SSRF) flaw
High
ghsa-j44m-5v8f-gc9c
Flowise is vulnerable to arbitrary file exposure through its ReadFileTool
Critical
CVE-2025-59936
get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass
Medium
CVE-2025-59426
lobe-chat has an Open Redirect
Medium
CVE-2025-59417
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
High
CVE-2025-59333
@executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode
High
CVE-2025-59331
is-arrayish@0.3.3 contains malware after npm account takeover
High
CVE-2025-59330
error-ex@1.3.3 contains malware after npm account takeover
High
CVE-2025-59162
color-convert@3.1.1 contains malware after npm account takeover
High
CVE-2025-59145
color-name@2.0.1 contains malware after npm account takeover
High
CVE-2025-59144
debug@4.4.2 contains malware after npm account takeover
High
CVE-2025-59143
color@5.0.1 contains malware after npm account takeover
High
CVE-2025-59142
color-string@2.1.1 contains malware after npm account takeover
High
CVE-2025-59141
simple-swizzle@0.2.3 contains malware after npm account takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.