Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersRegular Expression Denial of Service in dat.gui
Regular Expression Denial of Service in trim
Authorization bypass in Strapi
Injection and Cross-site Scripting in osm-static-maps
Cross-site Scripting in lightning-server
Prototype Pollution in mathjs
Prototype Pollution in simpl-schema
Server-Side Request Forgery in node-pdf-generator
Server-Side Request Forgery in phantomjs-seo
Prototype pollution in json-pointer
Arbitrary Code Execution in shiba
Prototype Pollution in bmoor
OS Command Injection in pomelo-monitor
Command Injection in geojson2kml
Prototype Pollution in tiny-conf
Command injection in get-git-data
Cross-site Scripting in quill
Command Injection in @theia/messages
Prototype Pollution in swiper
Regular Expression Denial of Service in postcss
OS Command Injection in ng-packagr
Uncontrolled Resource Consumption in json-bigint
TypeORM vulnerable to MAID and Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.