Critical
CVE-2026-23744
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,621
Reset filters
High
ghsa-gw32-9rmw-qwww
svelte is vulnerable to XSS with textarea bind:value
Low
CVE-2026-23634
Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode
Medium
CVE-2026-22820
Outray cli is vulnerable to race conditions in tunnels creation
High
CVE-2026-22814
Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
Critical
CVE-2026-22813
Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Medium
CVE-2026-22809
tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
High
CVE-2026-22812
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
Medium
CVE-2026-76232
Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file
Medium
CVE-2026-76233
Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file
Medium
CVE-2026-76231
Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependencies
Medium
CVE-2026-76230
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration
Medium
CVE-2026-76229
Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository
Medium
CVE-2026-22030
React Router has CSRF issue in Action/Server Action Request Processing
High
CVE-2026-22029
React Router vulnerable to XSS via Open Redirects
High
CVE-2026-21884
React Router SSR XSS in ScrollRestoration
High
CVE-2025-59057
React Router has XSS Vulnerability
High
CVE-2025-69264
pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"
High
CVE-2025-69263
pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies
Medium
CVE-2026-22032
Directus has open redirect in SAML
Critical
CVE-2026-21440
AdonisJS Path Traversal in Multipart File Handling
Critical
CVE-2025-68620
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
Medium
CVE-2025-69203
Signal K Server Vulnerable to Access Request Spoofing
High
CVE-2025-68619
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.