Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Prototype Pollution in arr-flatten-unflatten
trentm/json vulnerable to command injection
Improper exception handling in Aedes
Prototype Pollution in property-expr
Prototype Pollution in connie-lang
Prototype Pollution in irrelon-path and @irrelon/path
Prototype Pollution in templ8
Prototype Pollution in nis-utils
Prototype Pollution in madlib-object-utils
Prototype Pollution in phpjs
Uncontrolled Resource Consumption in fastify-multipart
Validation bypass in jpv
Header injection possible in Django
Regular Expression Denial of Service (ReDoS) in ua-parser-js
Path traversal in url-parse
Regular Expression Denial of Service in hosted-git-info
Improper Input Validation in sanitize-html
Improper Input Validation in sanitize-html
Arbitrary Code Execution in underscore
lodash vulnerable to Code Injection via `_.template` imports key names
Denial of service in chrono-node
Remote code execution in handlebars when compiling templates
Arbitrary command execution in roar-pidusage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.