High
CVE-2021-23392
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2021-23387
Open Redirect in trailing-slash
Critical
CVE-2021-25945
Prototype pollution vulnerability in js-extend
Critical
CVE-2021-29300
Command Injection in @ronomon/opened
High
CVE-2021-33502
ReDoS in normalize-url
High
CVE-2021-23391
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
High
CVE-2021-32673
Remote Command Execution in reg-keygen-git-hash-plugin
Critical
CVE-2021-25946
Prototype pollution in nconf-toml
High
CVE-2021-33587
Denial of service in css-what
High
CVE-2021-33623
Uncontrolled Resource Consumption in trim-newlines
Medium
CVE-2021-23388
Regular expression denial of service in forms
Critical
CVE-2021-26707
Prototype pollution in Merge-deep
High
CVE-2020-28469
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
Critical
CVE-2021-25947
Prototype pollution in nestie
High
CVE-2021-32641
Reflected XSS when using flashMessages or languageDictionary
Medium
CVE-2021-32660
Script injection
Medium
CVE-2021-32661
Script injection
Medium
CVE-2021-32662
Path traversal
Medium
ghsa-h45p-w933-jxh3
Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript
Medium
CVE-2021-32640
ReDoS in Sec-Websocket-Protocol header
Medium
ghsa-5vm8-hhgr-jcjp
Cross-site scripting vulnerability in TinyMCE
High
ghsa-4g53-vp7q-gfjv
constructEvent does not verify header
Low
ghsa-jcgr-9698-82jx
Improper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/build
High
CVE-2021-32624
Private Field data leak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.