Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,013
Reset filtersDoS via malicious record IDs in WatermelonDB
Cross-Site Scripting in jquery
XSS in TinyMCE
Command Injection in hot-formula-parser
Prototype Pollution Protection Bypass in qs
Http request which redirect to another hostname do not strip authorization header in @actions/http-client
Command Injection in npm-programmatic
Machine-In-The-Middle in lix
Machine-In-The-Middle in https-proxy-agent
CSRF and DNS Rebinding in Oasis
Information disclosure through error object in auth0.js
Prototype pollution in class-transformer
Prototype Pollution in minimist
Cross-Site Scripting in seeftl
Cross-Site Scripting in fileview
Open Redirect in ecstatic
Cross-Site Scripting in http_server
Path Traversal in statics-server
Incorrect Account Used for Signing
Holder can (re)create authentic credentials after receiving a credential in vp-toolkit
Holder can generate proof of ownership for credentials it does not control in vp-toolkit
Information disclosure in parse-server
discord-html not escaping HTML code blocks when lacking a language identifier
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.