Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,626
Reset filtersNo CSRF Validation in droppy
Regular Expression Denial of Service in jshamcrest
Regular Expression Denial of Service in jadedown
bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Cross-Site Scripting in sanitize-html
Pandao editor.md vulnerable to DOM XSS
Regular Expression Denial of Service in minimatch
Command Injection in egg-scripts
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Mosca REDoS Vulnerability
npm Token Leak in npm
Malicious Package in eslint-scope
auth0-js Privilege Escalation Vulnerability
Symlink Arbitrary File Overwrite in tar
Regular Expression Denial of Service in moment
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.