Critical
CVE-2020-28270
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2019-18413
SQL Injection and Cross-site Scripting in class-validator
Critical
CVE-2020-28274
Prototype pollution vulnerability in 'deepref'
Critical
CVE-2020-28280
Prototype pollution vulnerability in 'predefine'
Critical
CVE-2020-28283
Prototype pollution vulnerability in 'libnested'
Critical
CVE-2020-28282
Prototype pollution in getobject
Medium
CVE-2020-23849
Cross-site Scripting in jsoneditor
Medium
CVE-2021-23447
Cross-site Scripting in teddy
Low
ghsa-q324-q795-2q5p
Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
High
CVE-2021-22964
DOS and Open Redirect with user input
High
CVE-2021-21278
Risk of code injection
High
CVE-2021-41117
Insecure random number generation in keypair
High
CVE-2021-28128
Weak Password Recovery Mechanism for Forgotten Password in Strapi
Medium
CVE-2021-23372
Denial of Service (DoS) in mongo-express
Medium
CVE-2021-30109
Cross-site Scripting in Froala Editor
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
High
CVE-2021-23446
Inefficient Regular Expression Complexity in handsontable
High
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Medium
CVE-2021-41580
Improper Access Control in passport-oauth2
Medium
CVE-2021-3822
Regular Expression Denial of Service in jsoneditor
High
CVE-2021-3820
inflect vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2021-23445
Cross site scripting in datatables.net
Critical
CVE-2021-41097
Prototype pollution in aurelia-path
Critical
CVE-2020-28271
Prototype Pollution in deephas
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.