Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,501
Reset filtersSignature Malleabillity in elliptic
Directory traversal in rollup-plugin-server
Directory traversal in rollup-plugin-server
Authorization header is not sanitized in an error object in auth0
Command Injection in git-tags-remote
Remote Code Execution in scratch-vm
Directory traversal in fast-http
Uncontrolled resource consumption in jpeg-js
Improper Input Validation in sails-hook-sockets
Storing Password in Local Storage
GraphQL: Security breach on Viewer query
Command injection in codecov (npm package)
WordPress Core < 5.8.1 - LoDash Update
Command Injection in standard-version
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
Path Traversal in socket.io-file
Sensitive information exposure through logs in npm-registry-fetch
npm CLI exposing sensitive information through logs
Arbitrary file read via window-open IPC in Electron
Context isolation bypass via contextBridge in Electron
Context isolation bypass via leaked cross-context objects in Electron
Context isolation bypass via Promise in Electron
Authorization bypass in express-jwt
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.