Critical
CVE-2025-58434
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,621
Reset filters
High
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
Critical
CVE-2025-59046
interactive-git-checkout has a Command Injection vulnerability
High
CVE-2025-59041
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
High
CVE-2025-58765
Webrecorder packages are vulnerable to XSS through 404 error handling logic
Low
CVE-2025-58751
Vite middleware may serve files starting with the same name with the public directory
High
ghsa-ph6w-f82w-28w6
Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning
High
CVE-2025-58047
Volto affected by possible DoS by invoking specific URL by anonymous user
Medium
ghsa-hmfr-rx46-4jx2
GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation
High
CVE-2025-57810
jsPDF Denial of Service (DoS)
Medium
CVE-2025-57753
vite-plugin-static-copy files not included in `src` are possible to access with a crafted request
Critical
CVE-2025-55746
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
Medium
CVE-2025-55152
Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers
Low
ghsa-xcxh-6cv4-q8p8
HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit
Medium
CVE-2025-54793
Astros's duplicate trailing slash feature leads to an open redirection security issue
Low
CVE-2025-54798
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
Medium
CVE-2025-54387
IPX Allows Path Traversal via Prefix Matching Bypass
Critical
CVE-2025-54782
@nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers
High
CVE-2025-54586
GitProxy Hidden Commits Injection
High
CVE-2025-54585
GitProxy New Branch Approval Exploit
High
CVE-2025-54584
GitProxy Backfile Parsing Exploit
Low
CVE-2025-8129
Koa Open Redirect via Referrer Header (User-Controlled)
Medium
CVE-2025-54590
webfinger.js Blind SSRF Vulnerability
High
CVE-2025-54378
HAX CMS API Lacks Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.