Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersInefficient Regular Expression Complexity in koa
Authentication bypass in @sap/approuter
CouchAuth has a Server-Side Template Injection vulnerability in its email functionality
Cross-site Scripting (XSS) in serialize-javascript
Unknown vulnerability in Coinbase Wallet SDK
esbuild enables any website to send any requests to the development server and read the response
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
utils-extend Prototype Pollution
@stryker-mutator/util vulnerable to Prototype Pollution
node-opcua-alarm-condition prototype pollution vulnerability
eazy-logger prototype pollution
@zag-js/core prototype pollution
@rpldy/uploader prototype pollution
vxe-table prototype pollution
@tanstack/form-core prototype pollution
module-from-string prototype pollution
@ndhoule/defaults prototype pollution
Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Vitest browser mode serves arbitrary files
ZX Allows Environment Variable Injection for dotenv API
files.photo.gallery command injection
snowflake-sdk may incorrectly validate temporary credential cache file permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.