Medium
ghsa-jqx4-9gpq-rppm
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,499
Reset filters
Medium
CVE-2025-4144
@cloudflare/workers-oauth-provider PKCE bypass via downgrade attack
Medium
CVE-2025-4143
@cloudflare/workers-oauth-provider missing validation of redirect_uri on authorize endpoint
Medium
CVE-2025-46565
Vite's server.fs.deny bypassed with /. for files under project root
Medium
CVE-2025-46343
n8n Vulnerable to Stored XSS through Attachments View Endpoint
High
CVE-2025-43865
React Router allows pre-render data spoofing on React-Router framework mode
High
CVE-2025-43864
React Router allows a DoS via cache poisoning by forcing SPA mode
High
CVE-2025-43855
tRPC 11 WebSocket DoS Vulnerability
High
CVE-2025-1520
PostHog Plugin Server SQL Injection Vulnerability
Medium
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Medium
CVE-2025-32395
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Medium
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
Medium
CVE-2025-31486
Vite allows server.fs.deny to be bypassed with .svg or relative paths
Critical
CVE-2025-31477
Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`
Medium
Exploited in attacks
CVE-2025-31125
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Medium
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
High
CVE-2025-30353
Directus's webhook trigger flows can leak sensitive data
Medium
CVE-2025-30350
Directus's S3 assets become unavailable after a burst of HEAD requests
Medium
CVE-2025-30225
Directus's S3 assets become unavailable after a burst of malformed transformations
Medium
CVE-2025-30208
Vite bypasses server.fs.deny when using ?raw??
High
CVE-2025-2691
nossrf Server-Side Request Forgery (SSRF)
Medium
CVE-2025-30168
Parse Server has an OAuth login vulnerability
High
ghsa-5ccf-884p-4jjq
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability
High
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.