Medium
CVE-2021-3822
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
ghsa-65p7-pjj8-ggmr
Member account takeover
High
CVE-2021-41086
Clipboard-based XSS
Medium
CVE-2019-5444
Path Traversal in serve-here.js
Medium
ghsa-8r4g-cg4m-x23c
Denial of Service in node-static
Critical
CVE-2023-23619
Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina
High
CVE-2021-3803
Inefficient Regular Expression Complexity in nth-check
High
CVE-2021-3805
Prototype Pollution in object-path
High
CVE-2021-3807
Inefficient Regular Expression Complexity in chalk/ansi-regex
Medium
ghsa-wfrj-qqc2-83cm
Remote command injection when using sendmail email transport
High
ghsa-84p7-fh9c-6g8h
Prototype Pollution in mixme
Critical
CVE-2021-41264
UUPSUpgradeable vulnerability in @openzeppelin/contracts
Critical
ghsa-q4h9-46xg-m3x9
UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
Critical
CVE-2021-39199
Unsafe defaults in `remark-html`
Medium
CVE-2021-23439
Cross-site Scripting in file-upload-with-preview
High
CVE-2021-39109
Path traversal in atlasboard
High
CVE-2021-23406
Code Injection in pac-resolver
Low
CVE-2021-32830
Command injection in @diez/generation
High
CVE-2021-39187
Parse Server crashes with query parameter
Critical
CVE-2021-38384
Incorrect Authorization in serverless-offline
High
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
High
CVE-2021-39178
XSS in Image Optimization API for Next.js
High
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.