Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filtersDenial of Service in apostrophe
Malicious Package in bb-builder
Malicious Package in rate-map
Malicious Package in load-from-cwd-or-npm
Reverse Tabnabbing in quill
Undefined Behavior in zencashjs
Sandbox Breakout / Arbitrary Code Execution in safe-eval
Malicious Package in fs-extar
Malicious Package in destroyer-of-worlds
Arbitrary File Overwrite in decompress-zip
Remote Code Execution in pi_video_recording
Improper Authorization in loopback
Malicious Package in flatmap-stream
NoSQL injection in express-cart
Malicious Package in eslint-config-airbnb-standard
Malicious Package in eslint-config-eslint
Cross-Site Scripting in dojo
Regular Expression Denial of Service in ansi2html
Server secret was included in static assets and served to clients
Directory Traversal in Next.js
auth0-lock vulnerable to XSS via unsanitized placeholder property
Symlink Arbitrary File Overwrite in bower
smartbanner.js rel noopener vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.