Critical
ghsa-q4h9-46xg-m3x9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2021-3666
body-parser-xml vulnerable to Prototype Pollution
Medium
CVE-2021-40823
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Critical
CVE-2021-3645
merge vulnerable to Prototype Pollution
High
CVE-2021-23440
Prototype Pollution in set-value
Critical
CVE-2021-39199
Unsafe defaults in `remark-html`
Critical
CVE-2021-3766
objection.js Prototype Pollution vulnerability
Medium
CVE-2021-23439
Cross-site Scripting in file-upload-with-preview
Critical
ghsa-2c83-wfv3-q25f
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ZMarkdown
Critical
CVE-2021-47986
Incorrect version tags linked to external repository
High
CVE-2021-3757
Prototype Pollution in immer
High
CVE-2021-34435
Remote code execution in Eclipse Theia
Medium
CVE-2021-23438
Type confusion in mpath
High
CVE-2021-23426
Prototype Pollution in Proto
Medium
CVE-2021-30483
Directory Traversal in isomorphic-git
Critical
CVE-2021-23436
Prototype Pollution in immer
High
CVE-2021-39109
Path traversal in atlasboard
Medium
CVE-2021-32822
Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor in hbs
Medium
CVE-2021-23425
Uncontrolled Resource Consumption in trim-off-newlines
High
CVE-2021-23424
Uncontrolled Resource Consumption in ansi-html
Medium
CVE-2021-23429
Uncontrolled Resource Consumption in transpile
High
CVE-2021-23406
Code Injection in pac-resolver
High
CVE-2021-23430
Directory Traversal in startserver
Medium
CVE-2021-23432
Prototype Pollution in mootools
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.