Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersPath traversal in webpack-dev-middleware
Cross-site scripting in Survey Creator
Server crashes on invalid Cloud Function or Cloud Job name
TurboBoost Commands vulnerable to arbitrary method invocation
follow-redirects' Proxy-Authorization header kept across hosts
URL Redirection to Untrusted Site in OAuth2/OpenID in directus
Session Token in URL in directus
StimulusReflex arbitrary method call
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
RSSHub vulnerable to Server-Side Request Forgery
RSSHub Cross-site Scripting vulnerability caused by internal media proxy
HTTP Handling Vulnerability in the Bare server
JSONata expression can pollute the "Object" prototype
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
hexo-theme-anzhiyu Cross-site Scripting vulnerability
Directus version number disclosure
Budibase affected by VM2 Constructor Escape Vulnerability
ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection
Directus has MySQL accent insensitive email matching
Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin
mongo-express Cross-site Request Forgery vulnerability
Nteract Remote Code Execution vulnerability
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.