Medium
ghsa-2fvv-qxrq-7jq6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filters
High
CVE-2022-36313
file-type vulnerable to Infinite Loop via malformed MKV file
Medium
CVE-2022-25875
Svelte vulnerable to XSS when using objects during server-side rendering
High
CVE-2022-31112
Protected fields exposed via LiveQuery
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-25876
Server-Side Request Forgery in link-preview-js
Critical
CVE-2022-2216
Server-Side Request Forgery in parse-url
Medium
CVE-2022-31110
Denial of Service (DoS) vulnerability in RSSHub
Medium
CVE-2022-23080
Server-Side Request Forgery in Directus
High
CVE-2022-31089
Invalid file request can crash server
High
CVE-2022-31083
Authentication bypass vulnerability in Apple Game Center auth adapter
High
CVE-2022-32210
ProxyAgent vulnerable to MITM
Medium
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
High
CVE-2022-2062
NocoDB information disclosure vulnerability
Critical
CVE-2022-31830
Server-Side Request Forgery in kityminder
High
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
High
CVE-2021-34083
Command injection in google-it
Critical
CVE-2020-28246
Server-Side Template Injection in formio
Medium
CVE-2022-29229
Missing Cryptographic Step in cassproject
High
CVE-2021-26073
Broken Authentication in Atlassian Connect Express
Medium
CVE-2021-36383
Xen Orchestra Mishandles Authorization
Critical
CVE-2020-6948
HashBrown CMS RCE
High
CVE-2020-5840
HashBrown CMS Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.