Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filtersAim Improper Access Control
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Open WebUI Vulnerable to a Session Fixation Attack
Aim vulnerable to Cross-Site Request Forgery
Aim Path Traversal vulnerability
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
LoLLMS Code Injection vulnerability
imaginAIry Denial of Service (DoS) vulnerability
FastChat Server-Side Request Forgery vulnerability
Aim Uncontrolled Resource Consumption vulnerability
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
DB-GPT vulnerable to Cross-Site Request Forgery
Feast Cross-Origin Resource Sharing vulnerability
langchain-core allows unauthorized users to read arbitrary files from the host file system
InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
FastChat Uncontrolled Resource Consumption vulnerability
FastChat Server-Side Request Forgery vulnerability
FastChat Denial of Service vulnerability
HyperLPR Denial of Service vulnerability
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Gradio Vulnerable to Arbitrary File Deletion
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
DB-GPT Path Traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.