High
CVE-2023-22467
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2017-20165
debug Inefficient Regular Expression Complexity vulnerability
Critical
CVE-2022-25890
wifey vulnerable to Command Injection due to improper input sanitization
Critical
CVE-2021-4307
Baobab vulnerable to Prototype Pollution
High
CVE-2021-4306
terminal-kit Inefficient Regular Expression Complexity vulnerability
Critical
CVE-2018-25066
nodebatis SQL Injection vulnerability
Critical
CVE-2022-25923
exec-local-bin vulnerable to Command Injection
Medium
CVE-2017-20162
Vercel ms Inefficient Regular Expression Complexity vulnerability
High
CVE-2021-4305
robots-txt-guard Inefficient Regular Expression Complexity vulnerability
High
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
High
CVE-2022-48216
Uniswap Universal Router Incorrect Authorization vulnerability
High
CVE-2022-25926
window-control vulnerable to Command Injection due to improper input sanitization
High
CVE-2021-32821
MooTools Regular Expression Denial of Service
High
CVE-2021-4299
string-kit Inefficient Regular Expression Complexity vulnerability
High
CVE-2018-25061
rgb2hex vulnerable to inefficient regular expression complexity
Critical
CVE-2017-20160
express-param vulnerable to Improper Handling of Extra Parameters
Medium
CVE-2018-25058
Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access
Medium
CVE-2018-25053
Json2html vulnerable to cross-site scripting
High
CVE-2018-25049
email-existence Inefficient Regular Expression Complexity vulnerability
High
CVE-2015-10005
markdown-it vulnerable to Inefficient Regular Expression Complexity
Critical
CVE-2022-4742
json-pointer vulnerable to Prototype Pollution
Critical
CVE-2020-36632
flat vulnerable to Prototype Pollution
High
CVE-2021-4279
Starcounter-Jack JSON-Patch Prototype Pollution vulnerability
High
CVE-2021-4278
tree-kit vulnerable to Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.