Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 919
Reset filtersnode-opcua-alarm-condition prototype pollution vulnerability
eazy-logger prototype pollution
@zag-js/core prototype pollution
@rpldy/uploader prototype pollution
vxe-table prototype pollution
@tanstack/form-core prototype pollution
module-from-string prototype pollution
@ndhoule/defaults prototype pollution
Directus has a DOM-Based cross-site scripting (XSS) via layout_options
Websites were able to send any requests to the development server and read the response in vite
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)
Angular Expressions - Remote Code Execution when using locals
@intlify/shared Prototype Pollution vulnerability
Remote Code Execution on click of <a> Link in markdown preview
Glossarizer Cross-site Scripting vulnerability
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
JSONPath Plus Remote Code Execution (RCE) Vulnerability
Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page
@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings
whatsapp-api-js fails to validate message's signature
body-parser vulnerable to denial of service when url encoding is enabled
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.