Medium
CVE-2025-53626
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2025-53364
Parse Server exposes the data schema via GraphQL API
Critical
CVE-2025-53624
docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token
Critical
CVE-2025-53620
Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests
High
CVE-2025-53548
@clerk/backend Performs Insufficient Verification of Data Authenticity
High
CVE-2025-53355
MCP Server Kubernetes vulnerable to command injection in several tools
Medium
CVE-2025-59427
Cloudflare Vite plugin exposes secrets over the built-in dev server
High
CVE-2025-53372
Node.js Sandbox MCP Server vulnerability can lead to Sandbox Escape via Command Injection
Low
CVE-2025-53535
Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
High
CVE-2025-49826
Next.JS vulnerability can lead to DoS via cache poisoning
Low
CVE-2025-49005
Next.js has a Cache poisoning vulnerability due to omission of the Vary header
Medium
CVE-2025-52554
n8n is vulnerable to Improper Authorization through its `/stop` endpoint
Medium
CVE-2025-48939
tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
Medium
CVE-2025-49595
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests
High
CVE-2025-53107
@cyanheads/git-mcp-server vulnerable to command injection in several tools
Medium
CVE-2024-46993
Electron vulnerable to Heap Buffer Overflow in NativeImage
Low
CVE-2025-45143
string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
High
CVE-2024-46992
electron ASAR Integrity bypass by just modifying the content
High
CVE-2024-49365
tiny-secp256k1 allows for verify() bypass when running in bundled environment
High
CVE-2024-49364
tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
Low
ghsa-vh5j-5fhq-9xwg
Taylor has race condition in /get-patch that allows purchase token replay
Medium
CVE-2025-49592
n8n allows open redirects via the /signin endpoint
Medium
CVE-2025-52573
iOS Simulator MCP Command Injection allowed via exec API
Low
CVE-2025-6624
Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.