Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 394
Reset filtersdrupal/email_tfa - SA-CONTRIB-2025-115
Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels
drupal/civictheme - SA-CONTRIB-2025-113
drupal/civictheme - SA-CONTRIB-2025-112
drupal/plausible_tracking - SA-CONTRIB-2025-107
drupal/owlcarousel2 - SA-CONTRIB-2025-104
drupal/api_key_manager - SA-CONTRIB-2025-103
drupal/sync_composer_with_contrib - SA-CONTRIB-2025-102
drupal/facets - SA-CONTRIB-2025-100
drupal/layout_builder_perms - SA-CONTRIB-2025-097
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
drupal/gtm - SA-CONTRIB-2025-094
drupal/cookies - SA-CONTRIB-2025-092
drupal/file_download - SA-CONTRIB-2025-089
drupal/mail_login - SA-CONTRIB-2025-088
drupal/cookies_addons - SA-CONTRIB-2025-087
drupal/paragraphs_table - SA-CONTRIB-2025-084
drupal/miniorange_2fa - SA-CONTRIB-2025-082
drupal/klaro - SA-CONTRIB-2025-080
drupal/toc_js - SA-CONTRIB-2025-077
drupal/admin_audit_trail - SA-CONTRIB-2025-068
drupal/lightgallery - SA-CONTRIB-2025-069
drupal/cookies - SA-CONTRIB-2025-075
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.