Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersErxes Incorrect Access Control vulnerability
Erxes Path Traversal vulnerability
Erxes Path Traversal vulnerability
@vue/cli-plugin-pwa Regular Expression Denial of Service vulnerability
taro-css-to-react-native Regular Expression Denial of Service vulnerability
brace-expansion Regular Expression Denial of Service vulnerability
pm2 Regular Expression Denial of Service vulnerability
HaxCMS-PHP Command Injection Vulnerability
@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability
react-native-keys insecurely stores encryption cipher and Base64 chunks
Multer vulnerable to Denial of Service via unhandled exception
Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint
NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser
webpack-dev-server users' source code may be stolen when they access a malicious web site
AngularJS Incomplete Filtering of Special Elements vulnerability
billboard.js allows prototype pollution via the function generate
tar-fs can extract outside the specified dir with a specific tarball
Markdownify MCP Server allows Server-Side Request Forgery (SSRF) via the Markdownify.get() function
Markdownify MCP Server allows attackers to read arbitrary files
Information exposure in Next.js dev server due to lack of origin verification
auth-js Vulnerable to Insecure Path Routing from Malformed User Input
Strapi allows Server-Side Request Forgery in Webhook function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.