Medium
CVE-2025-25285
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 92
Reset filters
Low
ghsa-r5w7-f542-q2j4
Potential DoS when using ContextLines integration
High
CVE-2024-56159
Astro's server source code is exposed to the public if sourcemaps are enabled
Medium
CVE-2024-56140
Atro CSRF Middleware Bypass (security.checkOrigin)
Medium
CVE-2024-47885
DOM Clobbering Gadget found in astro's client-side router that leads to XSS
High
CVE-2024-45296
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
High
CVE-2024-30250
In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists
High
CVE-2024-29896
Content-Security-Policy header generation in middleware could be compromised by malicious injections
High
CVE-2024-21490
angular vulnerable to super-linear runtime due to backtracking
High
CVE-2023-50249
Sentry's Astro SDK vulnerable to ReDoS
Medium
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Medium
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Medium
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
High
CVE-2022-35923
v8n vulnerable to Inefficient Regular Expression Complexity
High
CVE-2022-21681
Inefficient Regular Expression Complexity in marked
High
CVE-2022-21680
Inefficient Regular Expression Complexity in marked
Medium
CVE-2021-43843
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
Low
CVE-2021-43838
Regular Expression Denial of Service (ReDoS) in jsx-slack
Low
ghsa-wxhq-pm8v-cw75
Regular Expression Denial of Service in clean-css
High
CVE-2018-20801
Regular Expression Denial of Service in highcharts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.