Medium
CVE-2026-49993
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,495
Reset filters
Low
CVE-2026-56317
Cross-site scripting via <NoScript> slot content in Nuxt's head components
High
CVE-2026-54312
n8n: Microsoft SQL Node Prototype Pollution
Critical
CVE-2026-54157
LobeHub: Unauthenticated SSRF in `/webapi/proxy`
High
CVE-2026-54301
n8n: Same-Origin XSS in Respond to Webhook Node
Medium
CVE-2026-54298
Astro: XSS via Unescaped Attribute Names in Spread Props
High
CVE-2026-54299
Astro: Host header SSRF in prerendered error page fetch
Medium
CVE-2026-54300
@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config
Medium
CVE-2026-54286
hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
High
CVE-2026-50146
Astro: Reflected XSS via unescaped slot name
Medium
CVE-2026-56301
Nuxt dev server vite-node IPC socket is world-connectable on Linux
High
CVE-2026-53721
Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher
Medium
CVE-2026-56326
Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`
Low
ghsa-rq7w-g337-39qq
Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`
Medium
CVE-2026-48988
markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations
Medium
CVE-2026-54285
OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation
Medium
CVE-2026-48125
UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`
Medium
CVE-2026-54270
protobufjs: Memory amplification from preserved unknown fields in binary decode
Low
CVE-2026-65899
DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output
Low
CVE-2026-53663
React Router: Potential CSRF via PUT/PATCH/DELETE document requests
Critical
CVE-2026-53633
Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE
Low
CVE-2026-65900
DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes
Low
CVE-2026-65901
DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects
Medium
CVE-2026-65902
DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.