Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersElectron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
Electron: Parent process code-sign check is spoofable
Ghost Content API filter bypass reveals private fields
Ghost: Cross-Site Scripting in Feature Image Captions
Ghost: Server-Side Request Forgery Mitigation Issue
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Ghost: Member existence leak via magic link sign-in response
XSS in Ghost's ActivityPub client
Ghost: Session Fixation in Ghost Admin
Ghost: Theme Upload Path Traversal
Ghost: Database Backup Path Traversal
Ghost: Server-Side Request Forgery in Image Fetching
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Ghost: Mobiledoc image-size fetch SSRF
Ghost: Server-side request forgery via DNS rebinding in external request handling
Ghost: Private IP filtering bypass to make server-side requests to internal services
Ghost: Archived Offers can be Redeemed
Ghost: File Upload Content-Type Spoofing
Ghost: Cross-Site Scripting in Universal Import
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.