Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,498
Reset filtersLog Forging in generator-jhipster-kotlin
Command Injection in Limdu
Regular expression denial of service in url-regex
Command injection in mversion
Angular vulnerable to Cross-site Scripting
Cross-site Scripting in dijit editor's LinkDialog plugin
Information disclosure in SSB-DB
Command Injection in umount
Prototype Pollution in ini-parser
Validation Bypass in schema-inspector
Reflected XSS in GraphQL Playground
Introspection in schema validation in Apollo Server
Regular Expression Denial of Service in websocket-extensions (NPM package)
Arbitrary shell command execution in logkitty
Arbitrary File Read in Snyk Broker
Arbitrary File Read in Snyk Broker
Arbitrary File Read in Snyk Broker
Arbitrary File Read in Snyk Broker
Information Exposure in Snyk Broker
Arbitrary File Read in Snyk Broker
DoS via malicious record IDs in WatermelonDB
Command injection in node-dns-sync
Exposure of Sensitive Information to an Unauthorized Actor in AEgir
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.