Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersOS Command Injection in git-add-remote
Open Redirect in koa-remove-trailing-slashes
Cross-site Scripting in vmd
OS Command Injection in node-key-sender
Injection in op-browser
karma-mojo enables OS Command Injection
Cross-site Scripting in aurelia-framework
Code injection in @rkesters/gnuplot
OS Command Injection in jscover
OS Command Injection in strong-nginx-controller
Insecure template handling in Express-handlebars
Time-of-check Time-of-use (TOCTOU) Race Condition in chownr
DOM-based cross-site scripting in Froala Editor
Prototype Pollution in Ajv
Deserialization of Untrusted Data in bson
Regular Expression Denial of Service in Handlebars
Arbitrary Code Execution in Handlebars
Cross-site scripting in @atlaskit/editor-core
Prototype Pollution in safetydance
Prototype pollution in pathval
OS Command Injection and Command Injection in kill-port-process
Cross-site Scripting in markdown-it-highlightjs
Code Injection in jsen
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.