Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersClipboard-based XSS
Cross-site Scripting in edge.js
Prototype Pollution in jointjs
Regular Expression Denial of Service in millisecond
Path Traversal in serve-here.js
Denial of Service in node-static
Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina
OS Command Injection in ssh2
Inefficient Regular Expression Complexity in nth-check
Prototype Pollution in object-path
prismjs Regular Expression Denial of Service vulnerability
Cross-site Scripting in peertube
semver-regex Regular Expression Denial of Service (ReDOS)
Inefficient Regular Expression Complexity in vuelidate
tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion
Inefficient Regular Expression Complexity in chalk/ansi-regex
Inefficient Regular Expression Complexity in code-server
Prototype Pollution in cookiex/deep
Inefficient Regular Expression Complexity in taro
Prototype Pollution in the merge and clone helper methods
Remote command injection when using sendmail email transport
Prototype Pollution in mixme
UUPSUpgradeable vulnerability in @openzeppelin/contracts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.