High
CVE-2017-16897
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2022-25883
semver vulnerable to Regular Expression Denial of Service
Medium
CVE-2023-35167
When setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id
Medium
CVE-2023-35165
AWS CDK EKS overly permissive trust policies
Medium
CVE-2023-34459
OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
Low
ghsa-68jh-rf6x-836f
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
Low
ghsa-gpv5-7x3g-ghjv
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
Medium
CVE-2023-34247
@keystone-6/auth Open Redirect vulnerability
Critical
CVE-2023-3224
nuxt Code Injection vulnerability
Medium
CVE-2021-26920
Druid ingestion system Authenticated users can read data from other sources than intended
Low
ghsa-5fp6-4xw3-xqq3
@keystone-6/core's bundled cuid package known to be insecure
High
CVE-2023-26133
progressbar.js vulnerable to Prototype Pollution
Medium
CVE-2020-36732
crypto-js uses insecure random numbers
High
CVE-2023-26132
dottie vulnerable to Prototype Pollution
High
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Medium
CVE-2023-34238
Gatsby develop server has Local File Inclusion vulnerability
High
CVE-2023-34245
@udecode/plate-link does not sanitize URLs to prevent use of the `javascript:` scheme
Medium
CVE-2023-34234
OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
High
CVE-2023-34104
fast-xml-parser vulnerable to Regex Injection via Doctype Entities
High
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Medium
CVE-2023-32689
Phishing attack vulnerability by uploading malicious HTML file
High
CVE-2023-2968
proxy denial of service vulnerability
Medium
CVE-2023-2972
antfu/utils vulnerable to prototype pollution
High
CVE-2023-26129
bwm-ng vulnerable to command injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.