Medium
CVE-2025-57752
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2025-55173
Next.js Content Injection Vulnerability for Image Optimization
Medium
CVE-2025-57822
Next.js Improper Middleware Redirect Handling Leads to SSRF
Medium
CVE-2025-9654
AiondaDotCom mcp-ssh command injection vulnerability in SSH operations
Medium
CVE-2025-4644
Payload's SQLite adapter Session Fixation vulnerability
Medium
CVE-2025-4643
Payload does not invalidate JWTs after log out
High
CVE-2025-58047
Volto affected by possible DoS by invoking specific URL by anonymous user
High
CVE-2025-50979
NodeBB SQL Injection vulnerability
High
CVE-2025-57820
devalue prototype pollution vulnerability
Medium
ghsa-224p-v68g-5g8f
GraphQL Armor Max-Depth Plugin Bypass via fragment caching
Medium
ghsa-hmfr-rx46-4jx2
GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation
High
CVE-2025-57810
jsPDF Denial of Service (DoS)
Medium
CVE-2025-57814
request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1
Medium
CVE-2025-43761
Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint
High
CVE-2025-57755
@musistudio/claude-code-router has improper CORS configuration
Medium
CVE-2025-57753
vite-plugin-static-copy files not included in `src` are possible to access with a crafted request
Critical
CVE-2025-9288
sha.js is missing type checks leading to hash rewind and passing on crafted data
Critical
CVE-2025-9287
cipher-base is missing type checks, leading to hash rewind and passing on crafted data
Low
CVE-2025-9262
wong2 mcp-cli Command Injection Vulnerability
High
ghsa-3j63-5h8p-gf7c
x402 SDK vulnerable in outdated versions in resource servers for builders
Medium
CVE-2025-57749
n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files
Critical
CVE-2025-55746
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
Medium
CVE-2025-50864
elysia-cors Origin Validation Error
Critical
CVE-2025-55294
screenshot-desktop vulnerable to command Injection via `format` option
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.