Medium
CVE-2025-46565
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2025-27611
Homograph attack allows Unicode lookalike characters to bypass validation.
Medium
CVE-2025-46344
Auth0 NextJS SDK v4 Missing Session Invalidation
Low
CVE-2025-0716
AngularJS improperly sanitizes SVG elements
Medium
ghsa-wfm2-rq5g-f8v5
@account-kit/smart-contracts Allowlist Module Bypass Vulnerability
Medium
CVE-2025-46343
n8n Vulnerable to Stored XSS through Attachments View Endpoint
Low
CVE-2025-46328
NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file
Low
CVE-2025-46653
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content
Medium
ghsa-733v-p3h5-qpq7
GraphQL Armor Cost-Limit Plugin Bypass via Introspection Query Obfuscation
High
CVE-2025-43865
React Router allows pre-render data spoofing on React-Router framework mode
High
CVE-2025-43864
React Router allows a DoS via cache poisoning by forcing SPA mode
High
CVE-2025-43855
tRPC 11 WebSocket DoS Vulnerability
High
CVE-2025-1520
PostHog Plugin Server SQL Injection Vulnerability
Medium
CVE-2024-47829
pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting
Critical
CVE-2025-32965
Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2
Medium
CVE-2025-43954
QMarkdown Cross-Site Scripting (XSS) vulnerability
High
CVE-2025-32792
ses's global contour bindings leak into Compartment lexical scope
High
CVE-2025-32442
Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass
Medium
CVE-2025-32791
Permission policy information leakage in Backstage permission system
Low
ghsa-qc59-cxj2-c2w4
aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role
Medium
CVE-2025-3573
jquery-validation vulnerable to Cross-site Scripting
Medium
CVE-2025-32997
http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed
Medium
CVE-2025-32996
http-proxy-middleware can call writeBody twice because "else if" is not used
Medium
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.