High
CVE-2025-8083
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2025-67750
Lightning Flow Scanner Vulnerable to Code Injection via Unsafe Use of `new Function()` in APIVersion Rule
High
ghsa-5j59-xgg2-r9c4
Next has a Denial of Service with Server Components - Incomplete Fix Follow-Up
Medium
ghsa-c6m7-q6pr-c64r
Vite Plugin React has a Source Code Exposure Vulnerability in React Server Components
High
ghsa-cpqf-f22c-r95x
Vite Plugin React has a Denial of Service Vulnerability in React Server Components
High
CVE-2025-67779
Denial of Service Vulnerability in React Server Components
Medium
ghsa-w37m-7fhw-fmv9
Next Server Actions Source Code Exposure
High
ghsa-mwv6-3258-q52c
Next Vulnerable to Denial of Service with Server Components
High
CVE-2025-55184
Denial of Service Vulnerability in React Server Components
Medium
CVE-2025-55183
Source Code Exposure Vulnerability in React Server Components
High
CVE-2025-67731
Servify-express rate limit issue
Low
CVE-2025-67716
Improper Validation of Query Parameters in Auth0 Next.js SDK
Medium
CVE-2025-67490
Improper Request Caching Lookup in the Auth0 Next.js SDK
High
CVE-2025-67718
Formio improperly authorized permission elevation through specially crafted request path
Medium
CVE-2025-65513
Fetch MCP Server has a Server-Side Request Forgery (SSRF) vulnerability
Low
CVE-2025-14284
@tiptap/extension-link vulnerable to Cross-site Scripting (XSS)
Medium
CVE-2025-13877
Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments
High
CVE-2025-66457
Elysia affected by arbitrary code injection through cookie config
Critical
CVE-2025-66456
Elysia vulnerable to prototype pollution with multiple standalone schema validation
Critical
CVE-2025-67489
@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server
Medium
CVE-2025-65849
Altcha Proof-of-Work obfuscation mode cryptanalytic break
Critical
CVE-2025-65964
n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
Medium
CVE-2025-66202
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
High
CVE-2025-65959
Open WebUI Vulnerable to Stored DOM XSS via Note 'Download PDF'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.