Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that e
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
MLflow Weak Password Requirements Authentication Bypass Vulnerability
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration form
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions check
Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml files
Jenkins Themis Plugin is missing a permission check
Jenkins ByteGuard Build Actions Plugin stores API tokens unencrypted in job config.xml files
Jenkins Start Windocks Containers Plugin is missing a permission check
Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery
Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files
Jenkins Eggplant Runner Plugin protection mechanism disabled
Jenkins Azure CLI Plugin does not restrict the commands it executes
Jenkins Nexus Task Runner Plugin is missing a permission check
Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery
Jenkins Themis Plugin vulnerable to cross-site request forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.