Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,016
Reset filtersSandbox Breakout / Arbitrary Code Execution in localeval
Server-Side Request Forgery in html-pdf-chrome
Sandbox Breakout / Prototype Pollution in notevil
Prototype Pollution in sahmat
Prototype Pollution in safe-object2
Prototype Pollution in getsetdeep
Prototype Pollution in deep-setter
Prototype Pollution in get-setter
Prototype Pollution in reggae
Regular Expression Denial of Service in markdown
Prototype Pollution in unflatten
Prototype Pollution in flat-wrap
Arbitrary Code Execution in handlebars
Malicious Package in malicious-npm-package
Sandbox Breakout / Arbitrary Code Execution in veval
Sandbox Breakout / Arbitrary Code Execution in @zhaoyao91/eval-in-vm
Sandbox Breakout / Arbitrary Code Execution in pitboss-ng
Sandbox Breakout / Arbitrary Code Execution in sandbox
Sandbox Breakout / Arbitrary Code Execution in lighter-vm
Malicious Package in sj-labc
Arbitrary Code Execution in handlebars
Malicious Package in superhappyfuntime
Malicious Package in arsenic-tabasco-cyborg-peanut-butter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.