Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersInsecure template handling in express-hbs
Insecure template handling in haml-coffee
Insecure template handling in Squirrelly
Prototype pollution in 101
Prototype Pollution in deep-override
Lack of protection against cookie tossing attacks in fastify-csrf
Improper file handling in matrix-react-sdk
Cross-site scripting in jspdf
Prototype Pollution in doc-path
Prototype pollution in json8-merge-patch
Prototype pollution in json8
Command injection in nodemailer
Regular expression deinal of service in express-validators
Prototype pollution in grpc and @grpc/grpc-js
Arbitrary Code Execution in json-ptr
Regular expression denial of service in @absolunet/kafe
Prototype pollution in @tsed/core
Prototype pollution in chart.js
Cross-site scripting in Joplin
Path Traversal in droppy
Cross-site Scripting in reveal.js
Improper Input Validation and Code Injection in pdf-image
Path Traversal in browserless-chrome
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.