Medium
CVE-2025-25290
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 758
Reset filters
Medium
CVE-2025-25289
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25288
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25285
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Critical
ghsa-vjh7-7g9h-fjfh
Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)
High
CVE-2025-25283
parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
High
ghsa-8rgj-285w-qcq4
Unknown vulnerability in Coinbase Wallet SDK
Medium
ghsa-67mh-4wv8-2f99
esbuild enables any website to send any requests to the development server and read the response
Medium
CVE-2025-23221
Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify
Medium
CVE-2024-36751
parse-uri Regular expression Denial of Service (ReDoS)
Critical
CVE-2024-56198
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Low
ghsa-m56h-5xx3-2jc2
Prototype pollution in jsii.configureCategories
High
CVE-2024-52798
path-to-regexp contains a ReDoS
High
CVE-2024-32965
@lobehub/chat Server Side Request Forgery vulnerability
Low
CVE-2024-7042
@langchain/community SQL Injection vulnerability
Medium
CVE-2020-26311
useragent Regular Expression Denial of Service vulnerability
High
CVE-2024-48930
secp256k1-node allows private key extraction over ECDH
High
CVE-2024-47824
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
High
CVE-2024-45296
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
High
CVE-2024-42471
@actions/artifact has an Arbitrary File Write via artifact extraction
Medium
CVE-2020-36830
ReDoS in urlregex
Medium
CVE-2024-45037
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
High
ghsa-6jrj-vc65-c983
unzip-stream allows Arbitrary File Write via artifact extraction
Low
CVE-2024-41945
The fuels-ts typescript SDK has no awareness of to-be-spent transactions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.