Medium
ghsa-4jqc-jvh2-pxg9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2022-32210
ProxyAgent vulnerable to MITM
Medium
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Low
CVE-2022-29247
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Medium
CVE-2022-29894
Cross-site Scripting in Strapi
Critical
CVE-2022-31830
Server-Side Request Forgery in kityminder
Medium
CVE-2022-31051
Exposure of Sensitive Information to an Unauthorized Actor in semantic-release
High
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
Critical
CVE-2020-28246
Server-Side Template Injection in formio
High
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
Medium
CVE-2022-29229
Missing Cryptographic Step in cassproject
High
CVE-2022-29219
AttesterSlashing number overflow
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2019-19729
bson-objectid contains Improper input validation
Medium
CVE-2022-29172
Cross-site Scripting in Auth0 Lock
Medium
CVE-2021-36383
Xen Orchestra Mishandles Authorization
Critical
CVE-2021-24037
Use After Free in Hermes
Critical
CVE-2021-25944
deep-defaults vulnerable to prototype pollution
Critical
CVE-2021-25915
Changeset vulnerable to prototype pollution
Critical
CVE-2020-28277
dset vulnerable to prototype pollution
Critical
CVE-2020-28279
flattenizer vulnerable to prototype pollution
Critical
CVE-2020-28278
shvl vulnerable to prototype pollution
Critical
CVE-2020-28272
keyget vulnerable to prototype pollution
Critical
CVE-2020-1911
Access of Resource Using Incompatible Type in Facebook Hermes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.