Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filtersReverse Tabnapping in swagger-ui
Directory Traversal in lactate
Unauthorized File Access in harp
High severity vulnerability that affects gun
Arbitrary File Overwrite in fstream
Arbitrary File Overwrite in tar
Improper Input Validation in tar-fs
SSL Validation Defaults to False in electron-packager
SQL Injection in waterline-sequel
Downloads Resources over HTTP in imageoptim
Downloads Resources over HTTP in webrtc-native
Arbitrary File Write in cli
No CSRF Validation in droppy
Regular Expression Denial of Service in jshamcrest
Regular Expression Denial of Service in jadedown
bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Cross-Site Scripting in sanitize-html
Pandao editor.md vulnerable to DOM XSS
Regular Expression Denial of Service in minimatch
Command Injection in egg-scripts
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.