Critical
ghsa-j4vm-hg8g-g9qv
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,481
Reset filters
Critical
ghsa-rjhc-w3fj-j6x9
Malicious Package in alipayjsapi
Critical
ghsa-jfx5-7mr2-g8hg
Malicious Package in alico
Critical
ghsa-8m5v-f2wp-wqr9
Malicious Package in ali-contributors
Critical
ghsa-h3m2-h22h-695r
Malicious Package in ali-contributor
Critical
ghsa-crr2-ph72-c52g
Malicious Package in my-very-own-package
High
ghsa-gvff-25cc-4f66
Path Traversal in restify-swagger-jsdoc
High
ghsa-crf7-fvjx-863q
Path Traversal in zero
Critical
ghsa-x87g-rgrh-r6g3
Malicious Package in rpc-websocket
Critical
ghsa-8j6j-4h2c-c65p
Arbitrary Code Execution in require-node
Critical
ghsa-fgp6-8g62-qx6w
Malicious Package in smartsearchwp
High
ghsa-qjfh-xc44-rm9x
Path Traversal in file-static-server
High
ghsa-wfhx-6pcm-7m55
Path Traversal in ponse
High
ghsa-v7cp-5326-54fh
Path Traversal in bruteser
Critical
ghsa-vv52-3mrp-455m
Malicious Package in m-backdoor
High
CVE-2020-8135
Server-Side Request Forgery in @uppy/companion
Critical
ghsa-f3vw-587g-r29g
Path Traversal in sapper
Critical
ghsa-65m9-m259-7jqw
Improper Authorization in react-oauth-flow
Critical
ghsa-cr5w-6rv4-r2qg
Malicious Package in maleficent
Critical
ghsa-65j7-66p7-9xgf
Malicious Package in font-scrubber
Critical
ghsa-fgfj-rj24-mj7q
Malicious Package in kraken-api
Critical
ghsa-fm7r-2pr7-rw2p
Malicious Package in yeoman-genrator
Critical
ghsa-9xww-fwh9-95c5
Malicious Package in uglyfi-js
Critical
ghsa-m2fp-c79h-rr79
Malicious Package in tensorplow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.