Medium
CVE-2026-22809
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 92
Reset filters
High
CVE-2026-0621
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
High
CVE-2025-68475
Fedify has ReDoS Vulnerability in HTML Parsing Regex
Medium
CVE-2025-66202
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
High
CVE-2025-66020
Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
Medium
CVE-2025-65944
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Medium
CVE-2025-65019
Astro Cloudflare adapter has Stored Cross-site Scripting vulnerability in /_image endpoint
Medium
CVE-2025-64765
Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values
High
CVE-2025-64764
Astro vulnerable to reflected XSS via the server islands feature
Low
CVE-2025-64757
Astro Development Server has Arbitrary Local File Read
Medium
CVE-2025-64525
Astro vulnerable to URL manipulation via headers, leading to middleware and CVE-2025-61925 bypass
Low
CVE-2025-64745
Astro development server error page is vulnerable to reflected Cross-site Scripting
High
CVE-2025-59837
Astro's bypass of image proxy domain validation leads to SSRF and potential XSS
Medium
CVE-2025-61925
Astro's `X-Forwarded-Host` is reflected without validation
High
CVE-2025-58179
Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter
Medium
CVE-2025-55303
Astro allows unauthorized third-party images in _image endpoint
Medium
CVE-2025-55207
@astrojs/node's trailing slash handling causes open redirect issue
Medium
CVE-2025-54793
Astros's duplicate trailing slash feature leads to an open redirection security issue
High
CVE-2025-53548
@clerk/backend Performs Insufficient Verification of Data Authenticity
Medium
CVE-2018-25110
Marked allows Regular Expression Denial of Service (ReDoS) attacks
Medium
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25290
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25289
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25288
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.