Medium
CVE-2025-52573
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 919
Reset filters
High
CVE-2025-49141
HaxCMS-PHP Command Injection Vulnerability
Medium
CVE-2024-52588
Strapi allows Server-Side Request Forgery in Webhook function
Medium
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Medium
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
High
CVE-2025-28269
js-object-utilities Vulnerable to Prototype Pollution
Low
CVE-2025-3191
React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button
High
CVE-2025-71319
image-size Denial of Service via Infinite Loop during Image Processing
High
CVE-2024-57083
Redoc Prototype Pollution via `Module.mergeObjects` Component
Low
CVE-2025-30222
Shescape has potential environment variable exposure on Windows with CMD
Medium
CVE-2025-30168
Parse Server has an OAuth login vulnerability
High
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
High
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Medium
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
High
CVE-2025-29907
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Critical
CVE-2025-29775
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Critical
CVE-2025-29774
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
High
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
High
CVE-2025-27597
Vue I18n Allows Prototype Pollution in `handleFlatJson`
High
CVE-2025-27108
DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace
High
CVE-2025-25283
parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
High
CVE-2025-24876
Authentication bypass in @sap/approuter
Critical
CVE-2025-24981
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
Critical
CVE-2024-57077
utils-extend Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.