Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 919
Reset filtersPrototype Pollution in pez
Cross-Site Scripting in jquery-mobile
Sandbox Breakout / Arbitrary Code Execution in static-eval
Malicious Package in flatmap-stream
Malicious Package in boogeyman
Cross-Site Scripting in dompurify
Sandbox Breakout / Arbitrary Code Execution in safe-eval
XSS via JQLite DOM manipulation functions in AngularJS
confinit vulnerable to prototype pollution
Prototype pollution in class-transformer
Prototype Pollution in handlebars
Validation bypass is possible in Json Pattern Validator
Prototype Pollution in chartkick
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Cross-Site Scripting in webtorrent
Arbitrary Code Injection in mobile-icon-resizer
Prototype Pollution in @apollo/gateway
Code Injection in js-yaml
Denial of Service in ws
Reflected Cross-Site Scripting in jquery.terminal
Cross-Site Scripting in simple-markdown
Cross-Site Scripting in editor.md
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.