Medium
CVE-2025-68273
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,621
Reset filters
High
CVE-2025-68272
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
Critical
CVE-2025-66398
Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)
High
CVE-2025-69256
serverless MCP Server vulnerable to Command Injection in list-projects tool
High
ghsa-xphh-5v4r-r3rx
PsiTransfer has Zip Slip Path Traversal via TAR Archive Download
Medium
CVE-2025-69211
Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)
High
CVE-2025-68697
Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
Critical
CVE-2025-68668
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
High
CVE-2025-68475
Fedify has ReDoS Vulnerability in HTML Parsing Regex
High
CVE-2025-68278
tinacms is vulnerable to arbitrary code execution
High
CVE-2025-68155
@vitejs/plugin-rsc has an Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint
Medium
CVE-2025-66482
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
Medium
CVE-2025-13877
Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments
Critical
CVE-2025-67489
@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server
High
CVE-2025-65959
Open WebUI Vulnerable to Stored DOM XSS via Note 'Download PDF'
Medium
CVE-2025-66404
mcp-server-kubernetes has potential security issue in exec_in_pod tool
Critical
ghsa-9qr9-h5gf-34mp
Next.js is vulnerable to RCE in React flight protocol
High
CVE-2025-66412
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
High
CVE-2025-71401
Better Auth affected by external request basePath modification DoS
High
CVE-2025-14874
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
High
CVE-2025-66035
Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client
Medium
CVE-2025-66219
willitmerge has a Command Injection vulnerability
High
CVE-2025-66020
Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
Medium
CVE-2025-65944
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.