Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,507
Reset filtersSensitive data exposure in NATS
Open Redirect in Next.js versions
Context isolation bypass in Electron
Unpreventable top-level navigation
Android WebView Universal Cross-site Scripting
File restriction bypass in socket.io-file
Environment Variable Injection in GitHub Actions
Malicious code in `loadyaml`
Malicious code in `electorn`
Potential XSS in jQuery dependency in Mirador
Prototype Pollution in node-forge
Renovate vulnerable to Azure DevOps token leakage in logs
Malicious Package in radic-util
Malicious Package in motiv.scss
SQL Injection in untitled-model
Malicious Package in react-datepicker-plus
Malicious Package in precode.js
Cross-Site Scripting in swagger-ui
Command Injection in entitlements
Malicious Package in scroool
Cross-Site Scripting in swagger-ui
Prototype Pollution in mergify
Malicious Package in grunt-radical
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.