Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Backstage: Improper input validation in TechDocs static content requests
Backstage: Cloud storage catalog locations may cross configured storage boundaries
Backstage: Improper input validation in proxy-backend
Backstage: Improper preservation of access restrictions during service credential delegation
Backstage: Improper input validation in cloud storage URL readers
Backstage: Inconsistent enforcement of allowed location types during catalog processing
Backstage: Improper URL validation in catalog entity placeholder resolution
Backstage: Sensitive information exposure in Scaffolder
Backstage: Secret-derived values may be exposed in scaffolder task logs
Backstage: Scaffolder action input authorization bypass
Backstage: Improper task state validation in Scaffolder backend
Backstage: Incorrect authorization in scaffolder task listing
drupal/advanced_filesystem - SA-CONTRIB-2026-217
drupal/restrict_route_by_ip - SA-CONTRIB-2026-216
drupal/examples - SA-CONTRIB-2026-215
drupal/permissions_by_term - SA-CONTRIB-2026-214
drupal/freelinking - SA-CONTRIB-2026-213
drupal/easy_breadcrumb - SA-CONTRIB-2026-212
drupal/country - SA-CONTRIB-2026-211
drupal/smartlinker_ai - SA-CONTRIB-2026-210
drupal/menu_link_attributes - SA-CONTRIB-2026-209
drupal/dkan - SA-CONTRIB-2026-208
drupal/miniorange_2fa - SA-CONTRIB-2026-207
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.