Low
ghsa-5fp6-4xw3-xqq3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 74
Reset filters
Critical
CVE-2022-39382
@keystone-6/core's NODE_ENV defaults to development with esbuild
High
CVE-2022-39249
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Medium
CVE-2017-6589
EpicEditor XSS Vulnerability
High
CVE-2018-7408
Incorrect Permission Assignment for Critical Resource in NPM
High
CVE-2022-21681
Inefficient Regular Expression Complexity in marked
High
CVE-2022-21680
Inefficient Regular Expression Complexity in marked
High
CVE-2021-41249
XSS vulnerability in GraphQL Playground from untrusted schemas
High
CVE-2020-7682
Path Traversal in marked-tree
High
ghsa-hfwx-c7q6-g54c
Vulnerability allowing for reading internal HTTP resources
Medium
CVE-2021-21306
Regular Expression Denial of Service (REDoS) in Marked
Low
ghsa-ch52-vgq2-943f
Regular Expression Denial of Service in marked
High
ghsa-m7qm-r2r5-f77q
Cross-Site Scripting in react-marked-markdown
Medium
CVE-2014-3743
Multiple Content Injection Vulnerabilities in marked
Medium
ghsa-xf5p-87ch-gxw2
Marked ReDoS due to email addresses being evaluated in quadratic time
Medium
CVE-2016-10531
Sanitization bypass using HTML Entities in marked
High
CVE-2016-10605
dalek-browser-ie downloads Resources over HTTP
High
CVE-2016-10606
Downloads Resources over HTTP in grunt-webdriver-qunit
High
CVE-2016-10612
dalek-browser-ie-canary downloads Resources over HTTP
High
CVE-2016-10624
selenium-chromedriver Downloads Resources over HTTP
High
CVE-2016-10581
steroids downloads resources over HTTP
High
CVE-2016-10533
Private Data Disclosure in express-restify-mongoose
High
CVE-2017-16114
Regular Expression Denial of Service in marked
Medium
CVE-2017-1000427
Marked vulnerable to XSS from data URIs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.