Critical
CVE-2025-62410
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 241
Reset filters
High
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
Low
CVE-2025-46720
Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields
High
CVE-2024-12905
tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File
Low
ghsa-5pq3-h73f-66hr
AWS CDK CodePipeline: trusted entities are too broad
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Low
CVE-2024-30260
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
High
ghsa-wg2x-rv86-mmpx
SPV Merkle proof malleability allows the maintainer to prove invalid transactions
High
CVE-2023-41058
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer
Medium
CVE-2023-35167
When setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id
Medium
CVE-2023-26108
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
Medium
CVE-2022-22984
Snyk plugins vulnerable to Command Injection
Low
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Medium
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
Medium
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
High
CVE-2020-28494
Command injection in total.js
High
CVE-2020-7763
Arbitrary File Read in phantom-html-to-pdf
Medium
CVE-2020-37267
Renovate vulnerable to Azure DevOps token leakage in logs
Medium
CVE-2020-15123
Command injection in codecov (npm package)
High
CVE-2020-4038
Reflected XSS in GraphQL Playground
Medium
ghsa-w42g-7vfc-xf37
Introspection in schema validation in Apollo Server
Critical
ghsa-7cg8-pq9v-x98q
Sandbox Breakout in realms-shim
Medium
CVE-2016-10594
ipip downloads Resources over HTTP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.