Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Flask-CORS allows for inconsistent CORS matching
Flask-CORS improper regex path matching vulnerability
Flask-CORS vulnerable to Improper Handling of Case Sensitivity
LoLLMS Code Injection vulnerability
LiteLLM Vulnerable to Remote Code Execution (RCE)
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
imaginAIry Denial of Service (DoS) vulnerability
Kedro allows Remote Code Execution by Pulling Micro Packages
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
FastChat Server-Side Request Forgery vulnerability
Aim Uncontrolled Resource Consumption vulnerability
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
Aim Relative Path Traversal vulnerability
Gradio Path Traversal vulnerability
GluonCV Arbitrary File Write via TarSlip
DB-GPT vulnerable to Cross-Site Request Forgery
FastChat open redirect vulnerability
Feast Cross-Origin Resource Sharing vulnerability
langchain-core allows unauthorized users to read arbitrary files from the host file system
InvokeAI Uncontrolled Resource Consumption vulnerability
InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
FastChat Uncontrolled Resource Consumption vulnerability
FastChat Server-Side Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.