High
CVE-2021-23568
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2021-23594
Prototype Pollution in realms-shim
High
CVE-2022-0155
Exposure of sensitive information in follow-redirects
Medium
CVE-2022-21671
Potential exposure of tokens to an Unauthorized Actor
High
CVE-2022-0087
Reflected cross-site scripting (XSS) vulnerability
Critical
ghsa-2w8g-m5j8-7m87
Zalgo-like output that crashes the server
High
ghsa-5rqg-jm4f-cqx7
Infinite loop causing Denial of Service in colors
Medium
CVE-2022-21670
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
Medium
CVE-2020-27428
Cross-site Scripting in Scratch-Svg-Renderer
High
CVE-2022-21667
Denial of Service in soketi
Low
ghsa-5rrq-pxf6-6jx5
Prototype Pollution in node-forge debug API.
Low
ghsa-wxgw-qj99-44c2
Prototype Pollution in node-forge util.setPath API
Low
ghsa-gf8q-jrpm-jvxq
URL parsing in node-forge could lead to undesired behavior.
Medium
CVE-2021-23382
Regular Expression Denial of Service in postcss
Critical
CVE-2020-7631
OS Command Injection in diskusage-ng
Critical
CVE-2020-7632
OS Command Injection in node-mpv
Low
CVE-2021-43862
jquery.terminal self XSS on user input
High
CVE-2022-0086
uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
Critical
CVE-2021-23574
Prototype Pollution in js-data
High
CVE-2021-23490
Uncontrolled Resource Consumption in parse-link-header
Medium
CVE-2018-1107
Regular expression deinal of service (ReDoS) in is-my-json-valid
Low
CVE-2018-1109
Regular Expression Denial of Service (ReDoS) in braces
High
CVE-2020-28503
Prototype Pollution in copy-props
Medium
CVE-2020-28500
Regular Expression Denial of Service (ReDoS) in lodash
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.