Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filtersSSRF in Rendertron
Path traversal in Node-Red
Prototype Pollution in Node-Red
Token verification bug in next-auth
File System Bounds Escape
Open redirect in Slashify
Angular Expressions - Remote Code Execution
CKEditor 5 Markdown plugin Regular expression Denial of Service
Processing untrusted theming resources might execute arbitrary code (ACE)
IPC messages delivered to the wrong frame in Electron
Cross-site Request Forgery in fastify-csrf
Prototype Pollution in immer
CORS misconfiguration in socket.io
Command injection in ts-process-promises
Regular Expression Denial of Service in jquery-validation
Cross-site scripting vulnerability in TinyMCE
Regex denial of service vulnerability in codesample plugin
Axios vulnerable to Server-Side Request Forgery
Hostname spoofing via backslashes in URL
Parse Server stores password in plain text
Command Injection in corenlp-js-interface
Cross-Site Scripting bypass in html-purify
ReDOS vulnerabities: multiple grammars
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.