Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersResource Exhaustion Denial of Service in http-proxy-agent
Incorrect sanitisation function leads to `XSS` in mermaid
XSS in svg2png (NPM package)
Incorrect Calculation in the MSR JavaScript Cryptography Library
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
Command Injection in node-windows
Path Traversal in http-server-node
Prototype Pollution in dojo
Remote Code Execution in npm-groovy-lint
Regular Expression Denial of Service (ReDoS) in jsx-slack
Open redirect in @auth0/nextjs-auth0
Code injection in plupload
Code Injection in md-to-pdf.
Prototype Pollution in merge-deep2.
Prototype Pollution in comb
Prototype Pollution in sey
OpenZeppelin Contracts initializer reentrancy may lead to double initialization
Uncaught Exception in mercurius
Prototype Pollution in @fabiocaccamo/utils.js
Command injection in github-todos
Cross-site scripting in lazysizes
Prototype pollution in paypal-adaptive
Code Injection in node-rules
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.