Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Prototype pollution in @tsed/core
Prototype pollution in chart.js
Cross-site scripting in Joplin
Path Traversal in droppy
Cross-site Scripting in reveal.js
Improper Input Validation and Code Injection in pdf-image
Path Traversal in browserless-chrome
Regular expression denial of service in codemirror
Regular Expression Denial of Service in dat.gui
Regular Expression Denial of Service in trim
Authorization bypass in Strapi
Injection and Cross-site Scripting in osm-static-maps
Cross-site Scripting in lightning-server
Prototype Pollution in mathjs
Prototype Pollution in simpl-schema
Server-Side Request Forgery in node-pdf-generator
Server-Side Request Forgery in phantomjs-seo
Prototype pollution in json-pointer
Arbitrary Code Execution in shiba
Prototype Pollution in bmoor
OS Command Injection in pomelo-monitor
Command Injection in geojson2kml
Prototype Pollution in tiny-conf
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.