Critical
ghsa-28f8-hqmc-7ph8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,027
Reset filters
Medium
ghsa-j8r2-2x94-2q67
Cross-Site Scripting in diagram-js-direct-editing
Medium
CVE-2015-5654
Cross-Site Scripting in dojo
Medium
ghsa-8fw4-xh83-3j6q
Cross-Site Scripting in diagram-js
Critical
ghsa-j8qr-rvcv-crhv
Malicious Package in electron-native-notify
Critical
ghsa-76xq-58hj-vwm2
Malicious Package in test-module-a
Medium
ghsa-wgw3-gf4p-62xc
Command Injection in wizard-syncronizer
Critical
ghsa-vf8q-pw7h-r2x2
Malicious Package in epress
Critical
ghsa-p32g-242c-76h3
Malicious Package in geoheat
Critical
ghsa-q42c-rrp3-r3xm
Malicious Package in commmander
High
ghsa-crpm-fm48-chj7
SQL Injection in resquel
Critical
ghsa-rvww-x6m4-4vc2
Malicious Package in blubird
Critical
ghsa-53jx-4wwh-gcqj
Malicious Package in angular-location-update
Medium
ghsa-j6v9-xgvh-f796
Command Injection in wxchangba
Critical
ghsa-4xgp-xrg3-c73w
Malicious Package in commqnder
Low
ghsa-9r3m-mhfm-39cm
Incorrect Calculation in bigint-money
Critical
ghsa-8mm3-2mcj-cx6r
Malicious Package in angluar-cli
High
ghsa-v86x-f47q-f7f4
Unauthorized File Access in atompm
Critical
ghsa-qv78-398w-cxp7
Malicious Package in shrugging-logging
High
ghsa-8mgg-5x65-m4m4
Command Injection in soletta-dev-app
High
CVE-2018-17145
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
Low
CVE-2020-15168
The `size` option isn't honored after following a redirect in node-fetch
Medium
CVE-2020-24660
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Low
ghsa-vpgc-7h78-gx8f
personnummer/js vulnerable to Improper Input Validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.