High
CVE-2025-53355
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filters
Medium
CVE-2025-59427
Cloudflare Vite plugin exposes secrets over the built-in dev server
Low
CVE-2025-53535
Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
Medium
CVE-2025-48939
tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
High
CVE-2025-53107
@cyanheads/git-mcp-server vulnerable to command injection in several tools
Medium
CVE-2025-52573
iOS Simulator MCP Command Injection allowed via exec API
Critical
CVE-2025-6545
pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
High
CVE-2025-52882
Claude Code Improper Authorization via websocket connections from arbitrary origins
Critical
ghsa-8g98-m4j9-qww5
Taylored webhook validation vulnerabilities
Medium
CVE-2025-5896
taro-css-to-react-native Regular Expression Denial of Service vulnerability
High
CVE-2025-49141
HaxCMS-PHP Command Injection Vulnerability
Medium
CVE-2025-49139
@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability
Medium
CVE-2025-48996
Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint
Medium
CVE-2025-30360
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser
High
CVE-2025-48387
tar-fs can extract outside the specified dir with a specific tarball
High
CVE-2025-47935
Multer vulnerable to Denial of Service via memory leaks from unclosed streams
Low
CVE-2025-46553
@misskey-dev/summaly Redirect Filter Bypass
Medium
CVE-2025-46565
Vite's server.fs.deny bypassed with /. for files under project root
Medium
ghsa-733v-p3h5-qpq7
GraphQL Armor Cost-Limit Plugin Bypass via Introspection Query Obfuscation
High
CVE-2025-43865
React Router allows pre-render data spoofing on React-Router framework mode
High
CVE-2025-43864
React Router allows a DoS via cache poisoning by forcing SPA mode
High
CVE-2025-43855
tRPC 11 WebSocket DoS Vulnerability
Medium
CVE-2024-47829
pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting
Medium
CVE-2025-32395
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.