Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersRegular Expression Denial of Service in djvalidator
OS Command Injection in systeminformation
push-dir Enables OS Command Injection
TOCTOU Race Condition in Yarn
Prototype Pollution in mout
ua-parser-js Regular Expression Denial of Service vulnerability
Prototype Pollution in js-data
Path Traversal in Yarn
Signatures are mistakenly recognized to be valid in jsrsasign
Prototype Pollution in undefsafe
Prototype Pollution in dot-object
Resource exhaustion in engine.io
Improper Certificate Validation in node-sass
Prototype Pollution leading to Remote Code Execution in superjson
Server-Side Request Forgery in @peertube/embed-api
Joplin Vulnerable to Code Injection
Validation bypass in frourio-express
Validation bypass in frourio
Cross-site Scripting in karma
Prototype Pollution in object-path-set
Prototype Pollution in putil-merge
Prototype Pollution in @strikeentco/set
Path Traversal in w-zip
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.