Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Uncontrolled Resource Consumption in fun-map
OS Command Injection in pixl-class
Prototype pollution in supermixer
ReDOS in IS-SVG
Cross-site scripting in react-bootstrap-table
Cross-site Scripting in Mermaid
Header injection in nodemailer
Prototype Pollution in record-like-deep-assign
Prototype Pollution in ts-nodash
Prototype polluation in just-safe-set
Code Injection in total4
Code Injection in total.js
Improper Input Validation in is-email
Prototype Pollution in putil-merge
Integer Overflow in png-img
Prototype Pollution in field
Uncontrolled Resource Consumption in strapi
Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak
Unsafe Deserialization that can Result in Code Execution
Remote code injection in Log4j
WP Booking System – Booking Calendar <= 2.0.14 - Reflected Cross-Site Scripting
Improperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware
OS Command Injection in fsa
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.