Crítica
CVE-2025-62410
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 241
Restablecer filtros
Alta
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
Baja
CVE-2025-46720
Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields
Alta
CVE-2024-12905
tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File
Baja
ghsa-5pq3-h73f-66hr
AWS CDK CodePipeline: trusted entities are too broad
Alta
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Media
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Baja
CVE-2024-30260
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
Alta
ghsa-wg2x-rv86-mmpx
SPV Merkle proof malleability allows the maintainer to prove invalid transactions
Alta
CVE-2023-41058
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer
Media
CVE-2023-35167
When setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id
Media
CVE-2023-26108
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
Media
CVE-2022-22984
Snyk plugins vulnerable to Command Injection
Baja
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Media
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
Media
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Alta
CVE-2020-28494
Command injection in total.js
Alta
CVE-2020-7763
Arbitrary File Read in phantom-html-to-pdf
Media
CVE-2020-37267
Renovate vulnerable to Azure DevOps token leakage in logs
Media
CVE-2020-15123
Command injection in codecov (npm package)
Alta
CVE-2020-4038
Reflected XSS in GraphQL Playground
Media
ghsa-w42g-7vfc-xf37
Introspection in schema validation in Apollo Server
Crítica
ghsa-7cg8-pq9v-x98q
Sandbox Breakout in realms-shim
Media
CVE-2016-10594
ipip downloads Resources over HTTP
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.