Medium
CVE-2021-23431
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Low
CVE-2021-32830
Command injection in @diez/generation
High
CVE-2021-39187
Parse Server crashes with query parameter
Medium
CVE-2021-23434
Prototype Pollution in object-path
Critical
CVE-2021-23421
Prototype Pollution in merge-change
Critical
CVE-2021-38384
Incorrect Authorization in serverless-offline
Medium
CVE-2021-23419
Prototype Pollution in open-graph
High
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
High
CVE-2021-39178
XSS in Image Optimization API for Next.js
High
CVE-2021-32831
Code Injection in total.js
High
CVE-2021-3749
axios Inefficient Regular Expression Complexity vulnerability
High
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
High
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
High
CVE-2020-22403
Cross-Site Request Forgery in express-cart
Critical
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Critical
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Medium
CVE-2021-39171
Unlimited transforms allowed for signed nodes
High
CVE-2021-37694
Code injection issue for java-spring-cloud-stream-template
High
CVE-2021-39157
Improper Handling of Exceptional Conditions in detect-character-encoding
High
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
High
CVE-2021-37695
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.