High
CVE-2023-37478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 83
Reset filters
High
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Critical
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
High
CVE-2023-27490
Missing proper state, nonce and PKCE checks for OAuth authentication
Medium
CVE-2022-39263
Upstash Adapter missing token verification
Low
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Critical
CVE-2022-35924
NextAuth.js before 4.10.3 and 3.29.10 sending verification requests (magic link) to unwanted emails
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2022-26183
Untrusted Search Path in PNPM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.