High
ghsa-qm7x-rc44-rrqw
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,476
Reset filters
High
CVE-2021-41249
XSS vulnerability in GraphQL Playground from untrusted schemas
High
CVE-2021-41248
GraphiQL introspection schema template injection attack
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
High
CVE-2021-22964
DOS and Open Redirect with user input
High
CVE-2021-21278
Risk of code injection
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
High
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Medium
CVE-2019-5444
Path Traversal in serve-here.js
Medium
ghsa-8r4g-cg4m-x23c
Denial of Service in node-static
High
CVE-2020-26301
OS Command Injection in ssh2
High
CVE-2021-3810
Inefficient Regular Expression Complexity in code-server
Medium
CVE-2021-40823
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Critical
CVE-2021-47986
Incorrect version tags linked to external repository
High
CVE-2021-39109
Path traversal in atlasboard
High
CVE-2021-23430
Directory Traversal in startserver
High
CVE-2021-39187
Parse Server crashes with query parameter
Critical
CVE-2021-38384
Incorrect Authorization in serverless-offline
High
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
High
CVE-2021-39157
Improper Handling of Exceptional Conditions in detect-character-encoding
High
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
Medium
CVE-2021-39138
parse-server new anonymous user session acts as if it's created with password
Medium
CVE-2018-3718
vercel/serve allows access to restricted files if filename is URL encoded.
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.