Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,491
Reset filtersAngular Expressions - Remote Code Execution
Axios vulnerable to Server-Side Request Forgery
Hostname spoofing via backslashes in URL
Parse Server stores password in plain text
ReDOS vulnerabities: multiple grammars
receiving subscription objects with deleted session
Sensitive data exposure in NATS
Renovate vulnerable to Azure DevOps token leakage in logs
Cross-Site Scripting in swagger-ui
Cross-Site Scripting in serve
Malicious Package in electron-native-notify
Cross-Site Scripting in serve
Path Traversal in serve
Malicious Package in equest
Malicious Package in reuest
Malicious Package in requst
Remote Code Execution in next
Denial of Service in http-proxy
Server-Side Request Forgery in ftp-srv
Global node_modules Binary Overwrite in bin-links
Command Injection in treekill
Command Injection in tree-kill
Command Injection in strapi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.