Low
CVE-2025-62505
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 419
Reset filters
Critical
CVE-2025-62410
happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript
High
CVE-2025-62381
`sveltekit-superforms` has Prototype Pollution in `parseFormData` function of `formData.js`
High
ghsa-j44m-5v8f-gc9c
Flowise is vulnerable to arbitrary file exposure through its ReadFileTool
Critical
CVE-2025-61913
Flowise is vulnerable to arbitrary file write through its WriteFileTool
High
CVE-2025-15061
figma-developer-mcp vulnerable to command injection in get_figma_data tool
Low
CVE-2025-57328
toggle-array vulnerable to prototype pollution
Critical
CVE-2025-59834
Command Injection in adb-mcp MCP Server
Medium
CVE-2025-57350
CSVTOJSON has a prototype pollution vulnerability
Medium
CVE-2025-59717
@digitalocean/do-markdownit has Type Confusion vulnerability
High
CVE-2025-59331
is-arrayish@0.3.3 contains malware after npm account takeover
High
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
High
CVE-2025-58444
MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server
Critical
CVE-2025-54994
@akoskm/create-mcp-server-stdio is vulnerable to MCP Server Command Injection through `exec` API
High
CVE-2025-58358
mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool
High
CVE-2025-57820
devalue prototype pollution vulnerability
High
CVE-2025-57810
jsPDF Denial of Service (DoS)
Medium
CVE-2025-43761
Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint
Critical
CVE-2025-9287
cipher-base is missing type checks, leading to hash rewind and passing on crafted data
High
CVE-2025-55164
content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE
High
CVE-2025-54073
mcp-package-docs vulnerable to command injection in several tools
Critical
CVE-2025-7783
form-data uses unsafe random function in form-data for choosing boundary
High
CVE-2025-53832
@translated/lara-mcp vulnerable to command injection in import_tmx tool
Low
CVE-2025-7339
on-headers is vulnerable to http response header manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.