Low
CVE-2025-49005
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2025-52554
n8n is vulnerable to Improper Authorization through its `/stop` endpoint
Medium
CVE-2025-48939
tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
Medium
CVE-2025-49595
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests
High
CVE-2025-53110
@modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix
High
CVE-2025-53109
@modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling
High
CVE-2025-53107
@cyanheads/git-mcp-server vulnerable to command injection in several tools
Medium
CVE-2024-46993
Electron vulnerable to Heap Buffer Overflow in NativeImage
Low
CVE-2025-45143
string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
High
CVE-2024-46992
electron ASAR Integrity bypass by just modifying the content
High
CVE-2024-49365
tiny-secp256k1 allows for verify() bypass when running in bundled environment
High
CVE-2024-49364
tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
Low
ghsa-vh5j-5fhq-9xwg
Taylor has race condition in /get-patch that allows purchase token replay
Medium
CVE-2025-49592
n8n allows open redirects via the /signin endpoint
Medium
CVE-2025-52573
iOS Simulator MCP Command Injection allowed via exec API
Low
CVE-2025-6624
Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode
Critical
CVE-2025-6547
pbkdf2 silently disregards Uint8Array input, returning static keys
Critical
CVE-2025-6545
pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
High
CVE-2025-52882
Claude Code Improper Authorization via websocket connections from arbitrary origins
Critical
ghsa-8g98-m4j9-qww5
Taylored webhook validation vulnerabilities
Medium
CVE-2025-50183
OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer
High
CVE-2025-6087
opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass
Critical
CVE-2025-49596
MCP Inspector proxy server lacks authentication between the Inspector client and proxy
Medium
CVE-2025-29744
pg-promise SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.