Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,518
Reset filtersRegex denial of service vulnerability in codesample plugin
Axios vulnerable to Server-Side Request Forgery
Hostname spoofing via backslashes in URL
XSS in Vega
Parse Server stores password in plain text
regular expression denial of service (ReDoS)
OS Command Injection in node-notifier
Cross-site Scripting in dompurify
Code Injection in mquery
Command Injection in corenlp-js-interface
Command injection in connection-tester
datatables.net vulnerable to Prototype Pollution due to incomplete fix
Command Injection Vulnerability in systeminformation
Denial of Service in ecstatic
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
Denial of service in fast-csv
Cross-Site Scripting bypass in html-purify
ReDOS vulnerabities: multiple grammars
Prototype Pollution in systeminformation
Prototype Pollution in highlight.js
Secret disclosure when containing characters that become URI encoded
Prototype Pollution in json-logic-js
Web Cache Poisoning in find-my-way
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.