Critical
ghsa-p9g3-vpvp-hcj5
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,518
Reset filters
Critical
ghsa-vm67-mh96-95mq
Malicious Package in bubfer-xor
Critical
ghsa-8hrq-9wm7-v3jw
Malicious Package in btffer-xor
Critical
ghsa-pxqp-mv67-g528
Malicious Package in bqffer-xor
Critical
ghsa-7cvf-p83w-48q6
Malicious Package in beffer-xor
Critical
ghsa-jvfv-jhw9-jmpp
Malicious Package in b5ffer-xor
Critical
ghsa-mjjq-c88q-qhr6
Cross-Site Scripting in dompurify
Medium
ghsa-mfcp-34xw-p57x
Authentication Bypass in saml2-js
Medium
ghsa-5v7r-jg9r-vq44
Insecure Cryptography Algorithm in simple-crypto-js
Critical
ghsa-876r-hj45-fw7g
Sandbox Breakout / Arbitrary Code Execution in safer-eval
High
ghsa-ccrp-c664-8p4j
Cross-Site Scripting in markdown-to-jsx
Critical
CVE-2020-12265
Path Traversal in decompress
High
ghsa-cv3v-7846-6pxm
Unauthorized File Access in node-git-server
Low
ghsa-q3w9-g74q-vp5f
Denial of Service in express-fileupload
High
ghsa-phph-xpj4-wvcv
Cross-Site Scripting in hexo-admin
High
ghsa-mh5c-679w-hh4r
Denial of Service in mongodb
Critical
ghsa-8jf2-cq6v-w234
Malicious Package in uglyfi.js
Critical
ghsa-725f-3pw7-rq6x
Malicious Package in 8.9.4
Critical
ghsa-vm7j-4rj6-mw2p
Malicious Package in ember_cli_babe
Critical
ghsa-8hmr-w35f-3qgj
Malicious Package in harmlesspackage
Critical
ghsa-f7g4-fm4c-54m9
Malicious Package in yeoman-genrator
Critical
ghsa-rrvm-gqq8-q2wx
Malicious Package in require-port
Critical
ghsa-wxrm-2h86-v95f
Malicious Package in pizza-pasta
Critical
ghsa-h232-fpqx-mqgr
Malicious Package in log-symboles
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.