Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,462
Reset filtersXSS Filter Bypass via Encoded URL in validator
Path Traversal in takeapeek
Forgeable Public/Private Tokens in jwt-simple
Stored Cross-Site Scripting in tianma-static
Path Traversal in knightjs
Command Injection in libnmap
Command Injection in apex-publish-static-files
node-tkinter is malware
tkinter is malware
Prototype Pollution in merge
Missing Origin Validation in parcel-bundler
No Charset in Content-Type Header in express
Cross-Site Scripting in handlebars
Private Data Disclosure in express-restify-mongoose
dojox vulnerable to unescaped string injection
Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page
Tajer <= 1.0.5 - Arbitrary File Upload
ReDoS via long string of semicolons in tough-cookie
mongose is malware
node-openssl is malware
Cross-Site Scripting in public
Denial of Service in memjs
Denial of Service via malformed accept-encoding header in hapi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.