Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersPrototype Pollution in highlight.js
Secret disclosure when containing characters that become URI encoded
Prototype Pollution in json-logic-js
Web Cache Poisoning in find-my-way
Cross-Site Scripting in scratch-svg-renderer
Arbitrary File Read in phantom-html-to-pdf
Cross-site Scripting in Strapi
Improper Authorization in Strapi
Command Injection in systeminformation
xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion
systeminformation command injection vulnerability
receiving subscription objects with deleted session
Prototype pollution in object-path
Unprotected dynamically loaded chunks
Regular Expression Denial of Service in npm-user-validate
Cross-site Scripting in Joplin
Sensitive data exposure in NATS
Open Redirect in Next.js versions
Context isolation bypass in Electron
Unpreventable top-level navigation
Android WebView Universal Cross-site Scripting
File restriction bypass in socket.io-file
Environment Variable Injection in GitHub Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.