Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filterskeyget vulnerable to prototype pollution
xdlocalstorage does not verify request origin
Potential Cross-site Scripting vulnerability in Hydrogen
Prototype Pollution in convict
Simditor XSS Vulnerability
Bootstrap vulnerable to Cross-Site Scripting (XSS)
NextAuth.js default redirect callback vulnerable to open redirects
node-ipc behavior change
Drupal core - SA-CORE-2022-005
Command injection in Parse Server through prototype pollution
Execution with Unnecessary Privileges in arc-electron
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Cross-site scripting in @atlaskit/editor-core
push-dir Enables OS Command Injection
Prototype Pollution in mout
Denial of Service Vulnerability in next.js
Uncaught Exception in engine.io
GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
Potential exposure of tokens to an Unauthorized Actor
Reflected cross-site scripting (XSS) vulnerability
Uncontrolled Resource Consumption in strapi
Open Redirect in xdLocalStorage
Server side request forgery in SwaggerUI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.