High
CVE-2025-53818
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 419
Reset filters
High
CVE-2025-53355
MCP Server Kubernetes vulnerable to command injection in several tools
High
CVE-2025-53372
Node.js Sandbox MCP Server vulnerability can lead to Sandbox Escape via Command Injection
High
CVE-2025-53107
@cyanheads/git-mcp-server vulnerable to command injection in several tools
High
CVE-2024-49365
tiny-secp256k1 allows for verify() bypass when running in bundled environment
High
CVE-2024-49364
tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
Critical
CVE-2025-6547
pbkdf2 silently disregards Uint8Array input, returning static keys
Medium
CVE-2025-30359
webpack-dev-server users' source code may be stolen when they access a malicious web site
Medium
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Medium
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
High
CVE-2025-71319
image-size Denial of Service via Infinite Loop during Image Processing
Medium
CVE-2025-30350
Directus's S3 assets become unavailable after a burst of HEAD requests
Medium
CVE-2025-30225
Directus's S3 assets become unavailable after a burst of malformed transformations
Medium
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
Critical
CVE-2025-71338
Flowise allows arbitrary file write to RCE
Critical
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
Critical
ghsa-vjh7-7g9h-fjfh
Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)
Low
ghsa-m9c9-mc2h-9wjw
Lodestar snappy checksum issue
Low
ghsa-53rv-hcvm-rpp9
Lodestar snappy decompression issue
High
CVE-2024-48930
secp256k1-node allows private key extraction over ECDH
Medium
CVE-2024-47885
DOM Clobbering Gadget found in astro's client-side router that leads to XSS
Medium
CVE-2024-43373
webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle
High
CVE-2024-21522
audify vulnerable to Improper Validation of Array Index
Low
CVE-2024-38372
Undici vulnerable to data leak when using response.arrayBuffer()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.