Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
OS Command Injection in curling
LDAP Injection in is-user-valid
Command injection in spritesheet-js
Improper Control of Dynamically-Managed Code Resources in config-shield
Path Traversal in node-red-contrib-huemagic
Denial of Service (DoS) via the unsetByPath function in jsjoints
Cross-site Scripting (XSS) in @scullyio/scully
Improper Input Validation in SocksJS-Node
Cross-site scripting in SocksJS-node
Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport
Path Traversal in jsreport-chrome-pdf
Prototype Pollution in asciitable.js
Arbitrary code execution in djv
Code Injection in script-manager
Injection in bodymen
Prototype pollution in set-object-value
Prototype Pollution in multi-ini
Prototype pollution in multi-ini
OS Command Injection in rpi
Uncontrolled Resource Consumption in rdf-graph-array
OS Command Injection in compile-sass
Command injection in corenlp-js-prefab
OS Command Injection in enpeem
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.