Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
ts-fns has prototype pollution vulnerability
messageformat has a prototype pollution vulnerability
web3-core-subscriptions has a Prototype Pollution vulnerability
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Command Injection in adb-mcp MCP Server
Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
counterpart vulnerable to prototype pollution
CSVTOJSON has a prototype pollution vulnerability
min-document vulnerable to prototype pollution
messageformat prototype pollution vulnerability
Mangati NovoSGA XSS vulnerability in /admin
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
Apache IoTDB: DoS Vulnerability
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
Liferay Portal and DXP does not properly expire sessions
TranslatePress <= 2.10.2 - Unauthenticated PHP Object Injection
BlindMatrix e-Commerce = 3.0 - Authenticated (Contributor+) Local File Inclusion
Di Themes Demo Site Importer <= 1.2 - Cross-Site Request Forgery
Advanced Settings <= 3.1.1 - Authenticated (Author+) Arbitrary File Upload
WSO2 Identity Server Apps allows content spoofing in logs
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.