Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,998
Reset filtersPath Traversal in localhost-now
Rate Limiting Bypass in express-brute
express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison
Prototype Pollution in upmerge
Sensitive Data Exposure in sequelize-cli
Denial of Service in url-relative
Path Traversal in statics-server
Marked ReDoS due to email addresses being evaluated in quadratic time
High severity vulnerability that affects gun
Denial of Service in ws
NoSQL Injection in loopback-connector-mongodb
Sensitive Data Exposure in pem
Cross-Site Scripting in public
Cross-Site Scripting in bracket-template
Insecure Credential Storage in web3
Arbitrary File Overwrite in fstream
Directory Traversal in ltt.js
Server-Side Request Forgery in terriajs-server
Cross-Site Scripting in shave
Cryptographically Weak PRNG in generate-password
Arbitrary File Overwrite in tar
Improper Input Validation in tar-fs
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.