High
ghsa-9p64-h5q4-phpm
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,018
Reset filters
High
ghsa-m5ch-gx8g-rg73
Remote Code Execution in pomelo-monitor
High
ghsa-44vf-8ffm-v2qh
Sensitive Data Exposure in rails-session-decoder
High
ghsa-w32g-5hqp-gg6q
Cross-Site Scripting in mermaid
Critical
ghsa-4qqc-mp5f-ccv4
Command Injection in bestzip
High
ghsa-x6m6-5hrf-fh6r
Denial of Service in markdown-it-toc-and-anchor
High
ghsa-h5vj-f7r9-w564
Entropy Backdoor in text-qrcode
Low
ghsa-992f-wf4w-x36v
Prototype Pollution in merge-objects
Critical
ghsa-m852-866j-69j8
Malicious Package in eslint-config-airbnb-standard
Critical
ghsa-pv55-r6j3-wp94
Malicious Package in eslint-config-eslint
High
ghsa-m7qm-r2r5-f77q
Cross-Site Scripting in react-marked-markdown
Critical
ghsa-33gc-f8v9-v8hm
Malicious Package in ladder-text-js
Critical
ghsa-353r-3v84-9pjj
Malicious Package in nothing-js
Critical
ghsa-3cjv-4phw-gvvv
Malicious Package in getcookies
Critical
ghsa-j5jc-jf8f-86q7
Malicious Package in dictum.js
Critical
ghsa-28xx-8j99-m32j
Malicious Package in nginxbeautifier
Critical
ghsa-54cr-gv8w-8324
Malicious Package in xoc
Critical
ghsa-3wh2-2pp3-2823
Malicious Package in simple-alipay
Critical
ghsa-3wjm-33mw-h388
Malicious Package in s3asy
Critical
ghsa-fwvp-x5gj-773j
Malicious Package in react-server-native
Critical
ghsa-5645-gc7h-98h8
Malicious Package in react-dates-sc
Critical
ghsa-4c87-gg2q-fc6m
Malicious Package in rc-calendar-jhorst
Critical
ghsa-cxcf-78mr-wpg7
Malicious Package in oauth-validator
Critical
ghsa-94m7-w873-6wwf
Malicious Package in modlibrary
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.