High
CVE-2025-59142
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 757
Reset filters
High
CVE-2025-59141
simple-swizzle@0.2.3 contains malware after npm account takeover
High
CVE-2025-59140
backslash@0.2.1 contains malware after npm account takeover
Critical
CVE-2025-71324
Flowise has an Arbitrary File Read
High
CVE-2025-59527
FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability
High
CVE-2025-58451
Cattown is Vulnerable to Uncontrolled Resource Consumption through Inefficient Regular Expression Complexity
Medium
CVE-2025-57665
Element Plus Link component (el-link) implements insufficient input validation for the href attribute
High
CVE-2025-58362
Hono's flaw in URL path parsing could cause path confusion
Critical
CVE-2025-9288
sha.js is missing type checks leading to hash rewind and passing on crafted data
Critical
CVE-2025-9287
cipher-base is missing type checks, leading to hash rewind and passing on crafted data
High
ghsa-3j63-5h8p-gf7c
x402 SDK vulnerable in outdated versions in resource servers for builders
High
CVE-2025-54888
@fedify/fedify has Improper Authentication and Incorrect Authorization
Medium
CVE-2025-54885
The Thinbus Javascript Secure Remote Password (SRP) Client Generates Fewer Bits of Entropy Than Intended
High
CVE-2025-54586
GitProxy Hidden Commits Injection
Medium
CVE-2025-54590
webfinger.js Blind SSRF Vulnerability
Critical
CVE-2025-7783
form-data uses unsafe random function in form-data for choosing boundary
High
ghsa-56r6-ccm5-8hg3
Alchemy Non-SMA and Webauthn Account Security Advisory
Medium
CVE-2025-54070
OpenZeppelin Contracts Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers
Medium
CVE-2025-54066
DiracX-Web is vulnerable to attack through an Open Redirect on its login page
Critical
CVE-2025-53624
docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token
High
CVE-2024-49364
tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
Low
CVE-2025-6624
Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode
Critical
CVE-2025-6545
pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
High
CVE-2025-45001
react-native-keys insecurely stores encryption cipher and Base64 chunks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.