Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 128
Reset filtersVite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Upstash Adapter missing token verification
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Incorrect Default Permissions in log4js
XSS vulnerability allowing arbitrary JavaScript execution
CSRF vulnerability in save-server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.