Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersBrowsershot Server-Side Request Forgery (SSRF) via setURL() Function
API Platform Core can leak exceptions message that may contain sensitive information
Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)
drupal/obfuscate - SA-CONTRIB-2025-029
drupal/access_code - SA-CONTRIB-2025-028
Yeswiki Path Traversal vulnerability allows arbitrary read of files
drupal/rapidoc_elements_field_formatter - SA-CONTRIB-2025-025
drupal/link_field_display_mode_formatter - SA-CONTRIB-2025-024
drupal/tfa - SA-CONTRIB-2025-023
drupal/ai - SA-CONTRIB-2025-021
drupal/oauth2_server - SA-CONTRIB-2025-020
drupal/formatter_suite - SA-CONTRIB-2025-026
drupal/alogin - SA-CONTRIB-2025-009
drupal/ignition - SA-CONTRIB-2025-007
drupal/cache_utility - SA-CONTRIB-2025-019
drupal/spamspan - SA-CONTRIB-2025-016
drupal/google_tag - SA-CONTRIB-2025-011
drupal/matomo - SA-CONTRIB-2025-008
drupal/oauth2_client - SA-CONTRIB-2025-013
drupal/gdpr - SA-CONTRIB-2025-018
drupal/google_tag - SA-CONTRIB-2025-012
drupal/ai - SA-CONTRIB-2025-022
drupal/config_split - SA-CONTRIB-2025-017
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.