Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filtersLiteLLM Has an Improper Authorization Vulnerability
Frappe has Possibility of Remote Code Execution due to improper validation
Frappe has possibility of SQL injection due to improper validations
LiteLLM Has a Leakage of Langfuse API Keys
Aim Excessive Data Query Operations in a Large Data Table vulnerability
Aim Uncontrolled Resource Consumption vulnerability
Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
BentoML Denial of Service (DoS) via Multipart Boundary
LiteLLM Reveals Portion of API Key via a Logging File
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
AgentScope stored cross-site scripting (XSS) vulnerability
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read
Aim allows denial of service due to no timeouts for some tracking server endpoints
Aim Improper Access Control
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Open WebUI Allows Viewing of Admin Details
Open WebUI Vulnerable to a Session Fixation Attack
Aim vulnerable to Cross-Site Request Forgery
Aim Path Traversal vulnerability
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.