Critical
CVE-2023-29566
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2023-27848
Remote code execution in broccoli-compass
High
CVE-2023-30533
Prototype Pollution in sheetJS
Critical
CVE-2023-28131
Expo SDK has an OAuth vulnerability
High
CVE-2023-29019
Session fixation in fastify-passport
Medium
CVE-2023-29020
CSRF token fixation in fastify-passport
Medium
CVE-2023-2142
Nunjucks autoescape bypass leads to cross site scripting
Medium
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
Medium
CVE-2023-30548
Path traversal vulnerability in gatsby-plugin-sharp
Critical
CVE-2023-30547
vm2 Sandbox Escape vulnerability
Low
CVE-2022-4942
eslint-detailed-reporter vulnerable to cross-site scripting
Critical
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Medium
CVE-2023-30543
`chainId` may be outdated if user changes chains as part of connection in @web3-react
High
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
Medium
CVE-2023-30541
OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
Critical
CVE-2023-29199
vm2 Sandbox Escape vulnerability
Critical
CVE-2023-29017
vm2 vulnerable to sandbox escape
High
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
High
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
High
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
High
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
High
CVE-2023-28103
Prototype pollution in matrix-react-sdk
High
CVE-2022-36060
matrix-react-sdk Prototype pollution vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.