Critical
CVE-2022-31180
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,629
Reset filters
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
High
CVE-2022-21213
Prototype Pollution in mout
High
CVE-2022-32210
ProxyAgent vulnerable to MITM
High
CVE-2021-34081
OS Command Injection in gitsome
High
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
High
CVE-2022-29219
AttesterSlashing number overflow
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Critical
CVE-2021-25915
Changeset vulnerable to prototype pollution
Medium
CVE-2020-26768
Formstone Vulnerable to Reflected XSS
Critical
CVE-2020-28272
keyget vulnerable to prototype pollution
High
CVE-2020-11610
xdlocalstorage does not verify request origin
Medium
CVE-2022-29230
Potential Cross-site Scripting vulnerability in Hydrogen
Critical
CVE-2022-21190
Prototype Pollution in convict
Medium
CVE-2018-6464
Simditor XSS Vulnerability
Medium
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
Low
ghsa-3mpp-xfvh-qh37
node-ipc behavior change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.