Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filtersKinto Attachment's attachments can be replaced on read-only records
Null pointer dereference in PKCS12 parsing
ai-flow Deserialization of Untrusted Data vulnerability
JupyterLab vulnerable to SXSS in Markdown Preview
JupyterLab vulnerable to potential authentication and CSRF tokens leak
Privilege escalation for users that can access mock configuration
Unsecured endpoints in the jupyter-lsp server extension
pyload Log Injection vulnerability
pyload Unauthenticated Flask Configuration Leakage vulnerability
fonttools XML External Entity Injection (XXE) Vulnerability
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
User accounts disclosed to unauthenticated actors on the LAN
DockerSpawner allows any image by default
Apache Superset - Elevation of Privilege
TorchServe ZipSlip
Cross-Site Request Forgery vulnerability in Prefect
Download to arbitrary folder can lead to RCE
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
Langchain Server-Side Request Forgery vulnerability
Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Fides Information Disclosure Vulnerability in Config API Endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.