Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,458
Reset filtersPath Traversal in general-file-server
Prototype Pollution in defaults-deep
Prototype Pollution in merge-deep
Prototype Pollution in lodash
Prototype Pollution in assign-deep
Prototype Pollution in mixin-deep
Cross-Site Scripting in connect
Stored Cross-Site Scripting in simplehttpserver
Path Traversal in glance
Path Traversal in node-srv
Path Traversal in angular-http-server
Path Traversal in localhost-now
Regular Expression Denial of Service in fresh
Regular Expression Denial of Service in forwarded
Regular Expression Denial of Service in string package
Regular Expression Denial of Service in tough-cookie
Regular Expression Denial of Service in parsejson
Regular Expression Denial of Service in marked
Regular Expression Denial of Service in slug
Denial of Service in nes
Bypassing Sanitization using DOM clobbering in html-janitor
method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header
Chromium Remote Code Execution in electron
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.