High
CVE-2025-61668
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2025-56200
validator.js has a URL validation bypass vulnerability in its isURL function
High
CVE-2025-56571
Finance.js vulnerable to DoS via the IRR function’s depth parameter
High
CVE-2025-56572
Finance.js vulnerable to DoS via the seekZero() parameter
High
CVE-2025-15061
figma-developer-mcp vulnerable to command injection in get_figma_data tool
High
CVE-2025-11149
@nubosoftware/node-static failure to catch exception can result in server crash
Critical
CVE-2025-11148
check-branches is vulnerable to command Injection
Medium
CVE-2025-3193
algoliasearch-helper is vulnerable to Prototype Pollution in _merge()
High
CVE-2025-59845
Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass
Medium
CVE-2025-59364
express-xss-sanitizer has an unbounded recursion depth
Critical
CVE-2025-59936
get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass
Critical
CVE-2020-36851
cors-anywhere vulnerable to server-side request forgery
High
CVE-2025-57317
apidoc-core is vulnerable to prototype pollution
High
CVE-2025-26278
dref is vulnerable to prototype pollution
Medium
CVE-2025-59426
lobe-chat has an Open Redirect
Medium
CVE-2025-57324
parse is vulnerable to prototype pollution
Low
CVE-2025-57327
spmrc vulnerable to prototype pollution
Low
CVE-2025-57329
web3-core-method is vulnerable to prototype pollution
Low
CVE-2025-57328
toggle-array vulnerable to prototype pollution
Medium
CVE-2025-57320
json-schema-editor-visual vulnerable to prototype pollution
High
CVE-2025-57318
csvjson vulnerable to prototype injection
High
CVE-2025-57323
mpregular vulnerable to prototype pollution
Low
CVE-2025-57326
sassdoc-extras vulnerable to prototype pollution
Low
CVE-2025-57348
node-cube vulnerable to prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.