Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,518
Reset filtersPrototype pollution in total.js
Prototype pollution in dotty
Denial of Service in uap-core
Angular Expressions - Remote Code Execution
Prototype pollution in nested-object-assign
CKEditor 5 Markdown plugin Regular expression Denial of Service
Processing untrusted theming resources might execute arbitrary code (ACE)
OS Command Injection in async-git
Path traversal in Node-RED-Dashboard
Command Injection in @graphql-tools/git-loader
Malicious npm package: an0n-chat-lib
Malicious npm package: discord-fix
Malicious npm package: sonatype
IPC messages delivered to the wrong frame in Electron
Cross-site Request Forgery in fastify-csrf
Prototype Pollution in immer
CORS misconfiguration in socket.io
Prototype pollution in gsap
Prototype pollution in JointJS
XSS in hello.js
Command injection in ts-process-promises
Command injection in buns
Regular Expression Denial of Service in jquery-validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.