Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filtersMalicious code in dreamgen (PyPI)
InvokeAI Uncontrolled Resource Consumption vulnerability
FastChat Denial of Service vulnerability
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
MobSF Partial Denial of Service (DoS)
Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint
MobSF Stored Cross-Site Scripting (XSS)
PyJWT Issuer field partial matches allowed
changedetection.io Path Traversal
MindsDB Cross-site Scripting vulnerability
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function
FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function
Sentry vulnerable to stored Cross-Site Scripting (XSS)
ydata cross-site scripting
PyMongo Out-of-bounds Read in the bson module
Slack integration leaks sensitive information in logs
code injection vulnerability exists in the huggingface/text-generation-inference repository
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
Transformers Deserialization of Untrusted Data vulnerability
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
aliyundrive-webdav vulnerable to Command Injection
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.