Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,499
Reset filters@conventional-changelog/git-client has Argument Injection vulnerability
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
@sequa-ai/sequa-mcp has Command Injection vulnerability
Parcel has an Origin Validation Error vulnerability
Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
@executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode
is-arrayish@0.3.3 contains malware after npm account takeover
error-ex@1.3.3 contains malware after npm account takeover
color-convert@3.1.1 contains malware after npm account takeover
color-name@2.0.1 contains malware after npm account takeover
debug@4.4.2 contains malware after npm account takeover
color@5.0.1 contains malware after npm account takeover
color-string@2.1.1 contains malware after npm account takeover
simple-swizzle@0.2.3 contains malware after npm account takeover
backslash@0.2.1 contains malware after npm account takeover
HackMD MCP Server has Server-Side Request Forgery (SSRF) vulnerability
Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark
Flowise has unsandboxed remote code execution via Custom MCP
Flowise has an Arbitrary File Read
Flowise has Remote Code Execution vulnerability
FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability
FlowiseAI Pre-Auth Arbitrary Code Execution
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.