Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filtersArbitrary Code Execution in json-ptr
Cross-site Scripting in quill
trentm/json vulnerable to command injection
Improper Input Validation in sanitize-html
Cross-site Scripting in React Draft Wysiwyg
OS Command Injection in rpi
OS Command Injection in compile-sass
OS Command Injection in serial-number
OS Command Injection in giting
Verification flaw in Solid identity-token-verifier
Prefix escape
Prefix escape
Open redirect in Slashify
Processing untrusted theming resources might execute arbitrary code (ACE)
Environment Variable Injection in GitHub Actions
Malicious Package in electron-native-notify
Malicious Package in epress
Malicious Package in commmander
Malicious Package in blubird
Malicious Package in commqnder
Malicious Package in 1337qq-js
Malicious Package in malicious-npm-package
Reverse Tabnabbing in showdown
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.