Low
CVE-2026-0824
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2026-22610
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes
Low
ghsa-j965-2qgj-vjmq
JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3
Low
ghsa-6475-r3vj-m8vf
AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value
Medium
CVE-2026-22596
Ghost has SQL Injection in Members Activity Feed
Medium
CVE-2026-22597
Ghost has SSRF via External Media Inliner
High
CVE-2026-22595
Ghost has Staff Token permission bypass
Low
CVE-2025-14505
Elliptic Uses a Cryptographic Primitive with a Risky Implementation
High
CVE-2026-22594
Ghost has Staff 2FA bypass
High
ghsa-96qw-h329-v5rg
Shakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side bundles
Medium
CVE-2026-22030
React Router has CSRF issue in Action/Server Action Request Processing
High
CVE-2026-22029
React Router vulnerable to XSS via Open Redirects
High
CVE-2026-21884
React Router SSR XSS in ScrollRestoration
Medium
CVE-2025-68470
React Router has unexpected external redirect via untrusted paths
Critical
CVE-2025-61686
React Router has Path Traversal in File Session Storage
High
CVE-2025-59057
React Router has XSS Vulnerability
High
CVE-2026-22028
Preact has JSON VNode Injection issue
Medium
CVE-2026-21894
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Critical
CVE-2026-21858
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
High
CVE-2025-69264
pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"
High
CVE-2025-69263
pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies
High
CVE-2025-69262
pnpm vulnerable to Command Injection via environment variable substitution
High
CVE-2025-67364
fast-filesystem-mcp has a Path Traversal vulnerability
High
CVE-2025-9611
Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.