Low
CVE-2025-66479
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2025-65945
auth0/node-jws Improperly Verifies HMAC Signature
Medium
CVE-2025-66404
mcp-server-kubernetes has potential security issue in exec_in_pod tool
Critical
ghsa-fmh4-wr37-44fp
React Server Components are Vulnerable to RCE
Critical
Exploited in attacks
CVE-2025-55182
React Server Components are Vulnerable to RCE
Critical
ghsa-9qr9-h5gf-34mp
Next.js is vulnerable to RCE in React flight protocol
High
CVE-2025-66032
Claude Code Command Validation Bypass Allows Arbitrary Code Execution
High
CVE-2025-66414
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Medium
CVE-2025-66400
mdast-util-to-hast has unsanitized class attribute
High
CVE-2025-66412
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
Medium
CVE-2025-66405
Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Host
Medium
CVE-2025-66415
fastify-reply-from affected by bypass of reply forwarding
Critical
CVE-2025-66401
MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL
High
CVE-2025-71401
Better Auth affected by external request basePath modification DoS
High
CVE-2025-14874
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
Medium
CVE-2025-66421
Tryton sao allows XSS because it does not escape completion values
Medium
CVE-2025-66420
Tryton sao allows XSS via an HTML attachment
High
CVE-2025-12758
Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements
High
CVE-2025-66035
Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client
Low
CVE-2025-71402
Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions
Medium
CVE-2025-66219
willitmerge has a Command Injection vulnerability
High
CVE-2025-66031
node-forge has ASN.1 Unbounded Recursion
Medium
CVE-2025-66030
node-forge is vulnerable to ASN.1 OID Integer Truncation
High
CVE-2025-12816
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.