High
CVE-2025-59430
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 81
Reset filters
Medium
CVE-2025-55152
Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers
Critical
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
Medium
CVE-2024-38527
Cross-site Scripting in ZenUML
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
Medium
ghsa-wm63-7627-ch33
@vendure/core's insecure currencyCode handling allows wrong payment amounts
Critical
CVE-2023-37466
vm2 Sandbox Escape vulnerability
Low
ghsa-gpv5-7x3g-ghjv
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
Critical
CVE-2023-30547
vm2 Sandbox Escape vulnerability
Critical
CVE-2023-29199
vm2 Sandbox Escape vulnerability
Medium
ghsa-98pf-gfh3-x3mp
Read the Docs vulnerable to Cross-Site Scripting (XSS)
Low
ghsa-3mpp-xfvh-qh37
node-ipc behavior change
Medium
ghsa-h45p-w933-jxh3
Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript
Medium
ghsa-7wwv-vh3v-89cq
ReDOS vulnerabities: multiple grammars
Critical
ghsa-38hx-3542-8fh3
Malicious code in `electorn`
Critical
ghsa-9p49-cwh3-4qhf
Malicious Package in grunt-radic
Critical
ghsa-p32g-242c-76h3
Malicious Package in geoheat
High
ghsa-5vj8-3v2h-h38v
Remote Code Execution in next
High
ghsa-25v4-mcx4-hh35
Cross-Site Scripting in atlasboard-atlassian-package
Low
ghsa-2mj8-pj3j-h362
Symlink reference outside of node_modules in bin-links
Critical
ghsa-hwh3-fhf6-73x9
Malicious Package in bictoinjs-lib
Critical
ghsa-j899-348x-h3rq
Malicious Package in serializes
High
ghsa-vpj4-89q8-rh38
Cross-Site Scripting in bpmn-js-properties-panel
Critical
ghsa-2h3x-95c6-885r
Malicious Package in river-mock
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.