Medium
CVE-2024-53843
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2024-32965
@lobehub/chat Server Side Request Forgery vulnerability
Low
CVE-2024-53261
@sveltejs/kit vulnerable to XSS on dev mode 404 page
Low
CVE-2024-53262
@sveltejs/kit has unescaped error message included on error page
Medium
ghsa-pqhp-25j4-6hq9
smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables
High
CVE-2024-58351
Flowise OverrideConfig security vulnerability
Medium
CVE-2024-11023
Firebase JavaScript SDK allows attackers to manipulate the "_authTokenSyncURL" to point to their own server
Low
CVE-2024-21539
Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit
High
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Medium
CVE-2024-21541
dom-iterator code execution vulnerability
Medium
CVE-2024-50336
matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal
High
CVE-2024-21538
Regular Expression Denial of Service (ReDoS) in cross-spawn
Medium
CVE-2024-51434
Froala WYSIWYG editor allows cross-site scripting (XSS)
Critical
CVE-2024-51757
happy-dom allows for server side code to be executed by a <script> tag
Low
CVE-2024-51753
@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled
Low
CVE-2024-51752
@workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled
High
CVE-2024-49770
Path traversal in oak allows transfer of hidden files within the served root directory
Medium
CVE-2024-42515
Glossarizer Cross-site Scripting vulnerability
Critical
CVE-2024-48910
DOMPurify vulnerable to tampering by prototype polution
High
CVE-2024-21537
lilconfig Code Injection vulnerability
Medium
CVE-2024-10491
Express ressource injection
Medium
CVE-2024-7774
Langchain Path Traversal vulnerability
Low
CVE-2024-7042
@langchain/community SQL Injection vulnerability
Medium
CVE-2024-50611
CycloneDX cdxgen may execute code contained within build-related files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.