Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersn158 vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function
html inputs of type password recorded in plaintext when converted to text inputs
Malware in pre-build binaries of bignum
Insufficient validation when decoding a Socket.IO packet
Potential for cross-site scripting in PostHog-js
Invalid push request payload crashes Parse Server
Double spend in snarkjs
vm2 vulnerable to Inspect Manipulation
vm2 Sandbox Escape vulnerability
Buffer under-read in workerd
n8n Information Disclosure vulnerability
n8n Privilege Escalation vulnerability
n8n Directory Traversal vulnerability
m.static Directory Traversal vulnerability
jsreport vulnerable to code injection
Path Traversal in Ghost
Cross-site scripting in TotalJS
Ghost vulnerable to information disclosure of private API fields
engine.io Uncaught Exception vulnerability
@mittwald/kubernetes's secret contents leaked via debug logging
appium-desktop OS Command Injection vulnerability
editor.md vulnerable to Cross-site Scripting
Possible prototype pollution in metadata record, when using meta decorator
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.