High
CVE-2022-23623
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2022-0437
Cross-site Scripting in karma
High
CVE-2021-23460
Prototype pollution in min-dash
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
High
CVE-2021-23567
Infinite Loop in colors.js
Medium
CVE-2022-0122
Open Redirect in node-forge
Medium
CVE-2022-21704
Incorrect Default Permissions in log4js
Critical
CVE-2021-24044
Access of Resource Using Incompatible Type in Hermes
High
CVE-2022-21681
Inefficient Regular Expression Complexity in marked
High
CVE-2022-21680
Inefficient Regular Expression Complexity in marked
Medium
ghsa-m6w8-fq7v-ph4m
GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
Medium
CVE-2022-21671
Potential exposure of tokens to an Unauthorized Actor
High
CVE-2022-0087
Reflected cross-site scripting (XSS) vulnerability
Critical
ghsa-2w8g-m5j8-7m87
Zalgo-like output that crashes the server
High
CVE-2022-21667
Denial of Service in soketi
Low
ghsa-5rrq-pxf6-6jx5
Prototype Pollution in node-forge debug API.
Low
ghsa-wxgw-qj99-44c2
Prototype Pollution in node-forge util.setPath API
Low
ghsa-gf8q-jrpm-jvxq
URL parsing in node-forge could lead to undesired behavior.
Medium
CVE-2021-23382
Regular Expression Denial of Service in postcss
Low
CVE-2021-43862
jquery.terminal self XSS on user input
Medium
CVE-2018-1107
Regular expression deinal of service (ReDoS) in is-my-json-valid
High
CVE-2020-28503
Prototype Pollution in copy-props
Medium
CVE-2019-10196
Resource Exhaustion Denial of Service in http-proxy-agent
High
CVE-2021-43861
Incorrect sanitisation function leads to `XSS` in mermaid
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.