Medium
CVE-2023-27481
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filters
High
CVE-2023-26111
node-static and @nubosoftware/node-static vulnerable to Directory Traversal
Medium
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
High
CVE-2022-25860
simple-git < 3.16.0 - Remote Code Execution
Medium
CVE-2022-25901
cookiejar Regular Expression Denial of Service via Cookie.parse function
Medium
CVE-2022-3145
@okta/oidc-middlewareOpen Redirect vulnerability
High
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2018-25058
Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access
High
CVE-2021-4279
Starcounter-Jack JSON-Patch Prototype Pollution vulnerability
High
CVE-2022-23487
libp2p DoS vulnerability from lack of resource management
Medium
CVE-2022-4111
ToolJet is vulnerable to Denial of Service (DoS)
High
CVE-2022-41879
Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks
Medium
CVE-2022-36077
Exfiltration of hashed SMB credentials on Windows via file:// redirect
Critical
CVE-2022-39382
@keystone-6/core's NODE_ENV defaults to development with esbuild
High
CVE-2022-25918
Inefficient Regular Expression Complexity in shescape
Medium
CVE-2022-41376
Cross site scripting in Metro UI
High
CVE-2022-39251
matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion
Medium
CVE-2022-39236
Improper beacon events in matrix-js-sdk can result in availability issues
Low
CVE-2022-36036
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Critical
CVE-2022-36045
Cryptographically weak PRNG in `utils.generateUUID`
Low
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Medium
CVE-2022-35916
OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.