Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,626
Reset filtersMalicious Package in flatmap-stream
NoSQL injection in express-cart
Malicious Package in eslint-config-airbnb-standard
Malicious Package in eslint-config-eslint
Cross-Site Scripting in dojo
Regular Expression Denial of Service in ansi2html
Server secret was included in static assets and served to clients
Directory Traversal in Next.js
auth0-lock vulnerable to XSS via unsanitized placeholder property
Symlink Arbitrary File Overwrite in bower
smartbanner.js rel noopener vulnerability
Cross-Site Scripting in webtorrent
Reverse Tabnapping in swagger-ui
Directory Traversal in lactate
Unauthorized File Access in harp
High severity vulnerability that affects gun
Arbitrary File Overwrite in fstream
Arbitrary File Overwrite in tar
Improper Input Validation in tar-fs
SSL Validation Defaults to False in electron-packager
SQL Injection in waterline-sequel
Downloads Resources over HTTP in imageoptim
Downloads Resources over HTTP in webrtc-native
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.