Low
ghsa-68jh-rf6x-836f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filters
Critical
CVE-2023-3224
nuxt Code Injection vulnerability
Medium
CVE-2021-26920
Druid ingestion system Authenticated users can read data from other sources than intended
High
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Medium
CVE-2023-34238
Gatsby develop server has Local File Inclusion vulnerability
High
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Medium
CVE-2023-32689
Phishing attack vulnerability by uploading malicious HTML file
Medium
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Medium
CVE-2023-32695
Insufficient validation when decoding a Socket.IO packet
Medium
CVE-2023-32688
Invalid push request payload crashes Parse Server
Critical
CVE-2023-2583
jsreport vulnerable to code injection
Medium
CVE-2023-31125
engine.io Uncaught Exception vulnerability
High
CVE-2023-29019
Session fixation in fastify-passport
Medium
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
Medium
CVE-2023-30548
Path traversal vulnerability in gatsby-plugin-sharp
Critical
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
High
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
High
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
High
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
High
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
High
CVE-2023-28103
Prototype pollution in matrix-react-sdk
Critical
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Critical
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.