Medium
CVE-2021-23760
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2021-23558
Prototype Pollution in bmoor
Critical
CVE-2021-23484
Exposure of Resource to Wrong Sphere in Zip-Local
High
CVE-2021-23460
Prototype pollution in min-dash
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
High
CVE-2022-0355
Exposure of Sensitive Information in simple-get
Medium
CVE-2021-4103
vditor Vulnerable to Cross-site Scripting in SVG events
High
CVE-2021-23518
Prototype Pollution in cached-path-relative
High
CVE-2021-23631
Path Traversal in convert-svg packages
High
CVE-2021-23664
Server side request forgery in @isomorphic-git/cors-proxy
Medium
CVE-2021-23566
Exposure of Sensitive Information to an Unauthorized Actor in nanoid
High
CVE-2022-0235
node-fetch forwards secure headers to untrusted sites
Medium
CVE-2021-33040
Cross-site Scripting in epubjs
High
CVE-2021-23567
Infinite Loop in colors.js
High
CVE-2022-0144
Improper Privilege Management in shelljs
Medium
CVE-2022-0122
Open Redirect in node-forge
Medium
CVE-2022-21704
Incorrect Default Permissions in log4js
Critical
CVE-2021-24044
Access of Resource Using Incompatible Type in Hermes
Medium
ghsa-64g7-mvw6-v9qj
Improper Privilege Management in shelljs
High
CVE-2022-21681
Inefficient Regular Expression Complexity in marked
High
CVE-2022-21680
Inefficient Regular Expression Complexity in marked
High
CVE-2022-21676
Uncaught Exception in engine.io
Medium
ghsa-m6w8-fq7v-ph4m
GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
Critical
CVE-2021-23543
Prototype Pollution in realms-shim
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.