Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersdrupal/miniorange_saml - SA-CONTRIB-2026-151
drupal/miniorange_saml - SA-CONTRIB-2026-150
drupal/miniorange_saml - SA-CONTRIB-2026-149
drupal/miniorange_saml - SA-CONTRIB-2026-148
drupal/miniorange_saml - SA-CONTRIB-2026-147
drupal/miniorange_saml - SA-CONTRIB-2026-146
drupal/miniorange_saml - SA-CONTRIB-2026-145
drupal/miniorange_saml - SA-CONTRIB-2026-144
drupal/miniorange_saml - SA-CONTRIB-2026-143
drupal/miniorange_saml - SA-CONTRIB-2026-142
drupal/miniorange_saml - SA-CONTRIB-2026-141
drupal/safedelete - SA-CONTRIB-2026-140
drupal/key_auth - SA-CONTRIB-2026-138
drupal/feed_block - SA-CONTRIB-2026-137
drupal/csp_log - SA-CONTRIB-2026-136
drupal/cas_server - SA-CONTRIB-2026-135
drupal/ai_provider_amazeeio - SA-CONTRIB-2026-134
mongodb: Reject "." and NUL bytes in database and collection names
Composer arbitrary command execution via a malicious package's Perforce source URL
phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
CakePHP: SmtpTransport vulnerable to CRLF header injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.