High
CVE-2025-61687
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2025-13033
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
Critical
CVE-2025-59159
SillyTavern Web Interface Vulnerable DNS Rebinding
Critical
CVE-2025-55346
Flowise vulnerable to RCE via Dynamic function constructor injection
Medium
CVE-2025-11287
MCPHub has an Improper Authorization vulnerability via its handleSseConnection function
Medium
CVE-2025-29192
Flowise Stored XSS vulnerability through logs in chatbot
Critical
CVE-2025-50538
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Medium
CVE-2025-71331
Flowise vulnerable to XSS
Low
CVE-2025-59829
Claude Code permission deny bypass through symlink
High
CVE-2025-59536
Claude Code can execute commands prior to the startup trust dialog
Low
CVE-2025-56515
Fiora chat group avatar is vulnerable to XSS via SVG files
Medium
CVE-2025-56200
validator.js has a URL validation bypass vulnerability in its isURL function
High
CVE-2025-56571
Finance.js vulnerable to DoS via the IRR function’s depth parameter
High
CVE-2025-15061
figma-developer-mcp vulnerable to command injection in get_figma_data tool
High
CVE-2025-11149
@nubosoftware/node-static failure to catch exception can result in server crash
Critical
CVE-2025-11148
check-branches is vulnerable to command Injection
High
CVE-2025-59845
Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass
Critical
CVE-2025-59936
get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass
Medium
CVE-2025-59426
lobe-chat has an Open Redirect
Low
CVE-2025-57348
node-cube vulnerable to prototype pollution
Medium
CVE-2025-57351
ts-fns has prototype pollution vulnerability
Low
CVE-2025-57349
messageformat has a prototype pollution vulnerability
Medium
CVE-2025-61685
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Critical
CVE-2025-59834
Command Injection in adb-mcp MCP Server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.