Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,012
Reset filtersTiming Attack in csrf-lite
No CSRF Validation in droppy
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
Regular Expression Denial of Service in jshamcrest
Regular Expression Denial of Service in jadedown
Directory Traversal in bitty
steroids downloads resources over HTTP
Downloads Resources over HTTP in libxl
Downloads Resources over HTTP in wasdk
selenium-binaries downloads resources over HTTP
ibapi downloads Resources over HTTP
jdf-sass downloads Resources over HTTP
Downloads Resources over HTTP in cobalt-cli
sauce-connect downloads Resources over HTTP
Downloads Resources over HTTP in webdrvr
Downloads Resources over HTTP in air-sdk
Downloads Resources over HTTP in openframe-glslviewer
chromedriver126 downloads Resources over HTTP
Prototype Pollution in mpath
Prototype Pollution in just-extend
Prototype Pollution in defaults-deep
Cross-Site Scripting in html-pages
Cross-Site Scripting in react-dom
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.