Medium
CVE-2025-48054
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2018-25110
Marked allows Regular Expression Denial of Service (ReDoS) attacks
Critical
CVE-2025-47949
samlify SAML Signature Wrapping attack
High
CVE-2025-47944
Multer vulnerable to Denial of Service from maliciously crafted requests
High
CVE-2025-47935
Multer vulnerable to Denial of Service via memory leaks from unclosed streams
High
CVE-2025-47934
OpenPGP.js's message signature verification can be spoofed
Medium
CVE-2025-47948
Cocotais Bot has builtin .echo command injection
Medium
CVE-2025-4759
lockfile-lint-api Vulnerable to Incorrect Behavior Order
Medium
CVE-2025-4727
Meteor Affected By Inefficient Regular Expression Complexity
Medium
CVE-2025-1647
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
Low
CVE-2025-47279
undici Denial of Service attack via bad certificate data
Low
CVE-2025-32421
Next.js Race Condition to Cache Poisoning
Medium
CVE-2025-47204
Bootstrap Multiselect Vulnerable to CSRF and Reflective XSS via Arbitrary POST Data
Medium
CVE-2025-47828
@lumieducation/h5p-server Fails to Sanitize Plain Text Strings
High
CVE-2025-47269
code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Low
CVE-2025-46812
Trix vulnerable to Cross-site Scripting on copy & paste
High
CVE-2025-46573
Passport-wsfed-saml2 allows SAML Authentication Bypass via Attribute Smuggling
Critical
CVE-2025-46572
Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping
Medium
ghsa-jqx4-9gpq-rppm
@misskey-dev/summaly allows IP Filter Bypass via Redirect
Low
CVE-2025-46720
Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields
Low
CVE-2025-46553
@misskey-dev/summaly Redirect Filter Bypass
Medium
CVE-2025-46332
Information Disclosure via Flags override link
Medium
CVE-2025-4144
@cloudflare/workers-oauth-provider PKCE bypass via downgrade attack
Medium
CVE-2025-4143
@cloudflare/workers-oauth-provider missing validation of redirect_uri on authorize endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.