Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filterssquirrelly Code Injection vulnerability
CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Ghost's improper authentication allows access to member information and actions
matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor
gettext.js has a Cross-site Scripting injection
Trix has a cross-site Scripting vulnerability on copy & paste
webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle
Server-Side Request Forgery in axios
Prototype pollution in izatop bunt
Qwik has a potential mXSS vulnerability due to improper HTML escaping
Matrix SDK for React's URL preview setting for a room is controllable by the homeserver
Flowise Cross-site Scripting in/api/v1/credentials/id
Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id
Flowise Cross-site Scripting in /api/v1/public-chatflows/id
Flowise Cross-site Scripting in api/v1/chatflows/id
Flowise Cors Misconfiguration in packages/server/src/index.ts
Flowise Path Injection at /api/v1/openai-assistants-file
NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint
Scrypted Cross-site Scripting vulnerability
Scrypted Cross-site Scripting vulnerability
Editor.js vulnerable to Code Injection
Nuxt Icon affected by a Server-Side Request Forgery (SSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.