Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filtersMobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
In aiohttp, compressed files as symlinks are not protected from path traversal
twisted.web has disordered HTTP pipeline response
TorchServe gRPC Port Exposure
Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
Aim Stored Cross-site Scripting Vulnerability
Weblate vulnerable to improper sanitization of project backups
Vanna vulnerable to SQL Injection
Sentry's Python SDK unintentionally exposes environment variables to subprocesses
yt-dlp File system modification and RCE through improper file-extension sanitization
OpaMiddleware does not filter HTTP OPTIONS requests
Local File Inclusion in Solara
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Aim denial of service vulnerability
Improper line feed handling in zenml
h2o vulnerable to unexpected POST request shutting down server
pdoc embeds link to malicious CDN if math mode is enabled
lollms vulnerable to path traversal due to unauthenticated root folder settings change
litellm vulnerable to improper access control in team management
zenml-io/zenml does not expire the session after password reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.