Medium
CVE-2024-47822
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2025-32395
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Medium
CVE-2025-32379
Koajs vulnerable to Cross-Site Scripting (XSS) at ctx.redirect() function
High
CVE-2025-32020
crud-query-parser SQL Injection vulnerability
High
CVE-2025-29189
Flowise Vulnerable to SQL Injection via `tableName` Parameter
Medium
CVE-2025-32029
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
Medium
CVE-2025-32014
estree-util-value-to-estree allows prototype pollution in generated ESTree
High
CVE-2025-32031
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
High
CVE-2025-32030
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
Medium
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
High
CVE-2025-28269
js-object-utilities Vulnerable to Prototype Pollution
Medium
CVE-2025-31476
drupal/tacjs - SA-CONTRIB-2025-027
Medium
CVE-2025-31475
tarteaucitron.js allows prototype pollution via custom text injection
Medium
CVE-2025-31138
tarteaucitron.js allows UI manipulation via unrestricted CSS injection
Medium
CVE-2025-31486
Vite allows server.fs.deny to be bypassed with .svg or relative paths
High
CVE-2025-31119
generator-jhipster-entity-audit vulnerable to Unsafe Reflection when having Javers selected as Entity Audit Framework
Medium
CVE-2025-3197
expand-object Vulnerable to Prototype Pollution via the expand() Function
High
CVE-2025-3194
bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function
Low
CVE-2025-3191
React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button
Critical
CVE-2025-31477
Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`
Low
CVE-2025-30218
Next.js may leak x-middleware-subrequest-id to external hosts
High
CVE-2025-71319
image-size Denial of Service via Infinite Loop during Image Processing
High
CVE-2025-31137
Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers
High
CVE-2024-38988
@alizeait/unflatto Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.