High
CVE-2022-21227
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
High
CVE-2022-22143
Prototype Pollution in convict
High
CVE-2022-1295
Prototype Pollution in fullpage.js
High
CVE-2022-24822
Denial of Service vulnerability in @podium/layout and @podium/proxy
High
CVE-2022-24815
SQL Injection when creating an application with Reactive SQL backend
High
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
Critical
CVE-2022-26969
Insecure default value for CORS configuration
High
CVE-2022-24814
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus
High
CVE-2022-24066
Command injection in simple-git
High
CVE-2022-26183
Untrusted Search Path in PNPM
Critical
CVE-2022-26260
Prototype Pollution in simple-plist
High
ghsa-5w9c-rv96-fr7g
Removal of functional code in faker.js
Low
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
Medium
CVE-2022-24773
Improper Verification of Cryptographic Signature in `node-forge`
High
CVE-2022-24772
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-24771
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-24759
Failure to validate signature during handshake
Critical
CVE-2022-0748
Arbitrary code execution in post-loader
Critical
CVE-2021-44908
Prototype Pollution in Sails.js
Medium
CVE-2021-23771
Sandbox escape in notevil and argencoders-notevil
High
CVE-2021-45851
Server-Side Request Forgery in FUXA
Medium
CVE-2021-23648
Cross-site Scripting in sanitize-url
Low
ghsa-3mpp-xfvh-qh37
node-ipc behavior change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.