Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersTinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
socket.io has an unhandled 'error' event
Lobe Chat API Key Leak
ws affected by a DoS when handling a request with many HTTP headers
@akbr/update Prototype Pollution
obx Prototype Pollution
flatten-json Prototype Pollution
Object Resolver Prototype Pollution
Badger Database Prototype Pollution
object-deep-assign Prototype Pollution
@cdr0/sg Prototype Pollution
Mattermost Desktop App Remote Code Execution
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
@strapi/plugin-content-manager leaks data via relations via the Admin Panel
SummerNote Cross Site Scripting Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
@grpc/grpc-js can allocate memory for incoming messages well above configured limits
ghtml Cross-Site Scripting (XSS) vulnerability
Generation of Error Message Containing Sensitive Information in zsa
Arbitrary file read via Playwright's screenshot feature exploiting file wrapper
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.