Low
CVE-2025-62366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,496
Reset filters
High
CVE-2025-59288
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
Critical
CVE-2025-61927
Happy DOM: VM Context Escape can lead to Remote Code Execution
Medium
CVE-2025-61925
Astro's `X-Forwarded-Host` is reflected without validation
High
ghsa-j44m-5v8f-gc9c
Flowise is vulnerable to arbitrary file exposure through its ReadFileTool
High
CVE-2025-61928
Better Auth: Unauthenticated API key creation through api-key plugin
Critical
CVE-2025-61913
Flowise is vulnerable to arbitrary file write through its WriteFileTool
High
CVE-2025-61687
FlowiseAI/Flosise has File Upload vulnerability
Critical
CVE-2025-59159
SillyTavern Web Interface Vulnerable DNS Rebinding
Critical
CVE-2025-55346
Flowise vulnerable to RCE via Dynamic function constructor injection
Low
CVE-2025-11285
MCPHub's ServerController is vulnerable to Command Injection
Medium
CVE-2025-29192
Flowise Stored XSS vulnerability through logs in chatbot
High
CVE-2025-61668
@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user
High
CVE-2025-15061
figma-developer-mcp vulnerable to command injection in get_figma_data tool
High
CVE-2025-11149
@nubosoftware/node-static failure to catch exception can result in server crash
High
CVE-2025-59845
Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass
Critical
CVE-2025-59936
get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass
Critical
CVE-2020-36851
cors-anywhere vulnerable to server-side request forgery
Medium
CVE-2025-61685
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Critical
CVE-2025-59834
Command Injection in adb-mcp MCP Server
Medium
CVE-2025-59526
Mailgen: HTML injection vulnerability in plaintext e-mails
High
CVE-2025-59831
`git-comiters` Command Injection vulnerability
Medium
CVE-2025-59433
@conventional-changelog/git-client has Argument Injection vulnerability
Medium
CVE-2025-59417
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.