High
CVE-2025-59532
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 764
Reset filters
High
CVE-2025-59331
is-arrayish@0.3.3 contains malware after npm account takeover
High
CVE-2025-59330
error-ex@1.3.3 contains malware after npm account takeover
High
CVE-2025-59162
color-convert@3.1.1 contains malware after npm account takeover
High
CVE-2025-59145
color-name@2.0.1 contains malware after npm account takeover
High
CVE-2025-59144
debug@4.4.2 contains malware after npm account takeover
High
CVE-2025-59143
color@5.0.1 contains malware after npm account takeover
High
CVE-2025-59142
color-string@2.1.1 contains malware after npm account takeover
High
CVE-2025-59141
simple-swizzle@0.2.3 contains malware after npm account takeover
High
CVE-2025-59140
backslash@0.2.1 contains malware after npm account takeover
Critical
CVE-2025-71324
Flowise has an Arbitrary File Read
High
CVE-2025-59527
FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability
High
CVE-2025-58451
Cattown is Vulnerable to Uncontrolled Resource Consumption through Inefficient Regular Expression Complexity
Medium
CVE-2025-57665
Element Plus Link component (el-link) implements insufficient input validation for the href attribute
High
CVE-2025-58362
Hono's flaw in URL path parsing could cause path confusion
Critical
CVE-2025-9288
sha.js is missing type checks leading to hash rewind and passing on crafted data
Critical
CVE-2025-9287
cipher-base is missing type checks, leading to hash rewind and passing on crafted data
High
ghsa-3j63-5h8p-gf7c
x402 SDK vulnerable in outdated versions in resource servers for builders
High
CVE-2025-54888
@fedify/fedify has Improper Authentication and Incorrect Authorization
Medium
CVE-2025-54885
The Thinbus Javascript Secure Remote Password (SRP) Client Generates Fewer Bits of Entropy Than Intended
High
CVE-2025-54586
GitProxy Hidden Commits Injection
Medium
CVE-2025-54590
webfinger.js Blind SSRF Vulnerability
Critical
CVE-2025-7783
form-data uses unsafe random function in form-data for choosing boundary
High
ghsa-56r6-ccm5-8hg3
Alchemy Non-SMA and Webauthn Account Security Advisory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.