Critical
CVE-2020-24391
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2020-7782
Command injection in spritesheet-js
Medium
CVE-2020-7693
Improper Input Validation in SocksJS-Node
Critical
CVE-2020-7771
Prototype Pollution in asciitable.js
High
CVE-2020-7787
Improper Authentication in react-adal
Critical
CVE-2021-26275
Command injection in eslint-fixer
Medium
CVE-2021-20327
mongodb-client-encryption vulnerable to Improper Certificate Validation
High
CVE-2021-21423
Rebuild-bot workflow may allow unauthorised repository modifications
Critical
ghsa-prmc-5v5w-c465
Client TLS credentials sent raw to server in npm package nats
Medium
CVE-2021-21391
Regular expression Denial of Service in multiple packages
High
CVE-2021-21414
Command injection vulnerability in @prisma/sdk in getPackedPackage function
High
CVE-2021-21413
Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate
Medium
CVE-2021-21412
[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values
High
CVE-2021-21267
Regular Expression Denial-of-Service in npm schema-inspector
High
CVE-2021-21384
Null characters not escaped
Medium
CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
Medium
CVE-2021-21368
Prototype poisoning
Medium
CVE-2021-21366
Misinterpretation of malicious XML input
Medium
ghsa-xmh9-rg6f-j3mr
Verification flaw in Solid identity-token-verifier
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
Low
CVE-2021-21322
Prefix escape
Critical
CVE-2021-21321
Prefix escape
High
CVE-2021-27516
URIjs Hostname spoofing via backslashes in URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.