Critical
ghsa-mvch-rh6h-2m47
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,504
Reset filters
Critical
ghsa-4xgp-xrg3-c73w
Malicious Package in commqnder
Low
ghsa-9r3m-mhfm-39cm
Incorrect Calculation in bigint-money
Critical
ghsa-r863-p739-275c
Malicious Package in reuest
Critical
ghsa-8mm3-2mcj-cx6r
Malicious Package in angluar-cli
High
ghsa-v86x-f47q-f7f4
Unauthorized File Access in atompm
Critical
ghsa-8qx4-r7fx-xc4v
Malicious Package in requst
Critical
ghsa-qv78-398w-cxp7
Malicious Package in shrugging-logging
High
ghsa-8mgg-5x65-m4m4
Command Injection in soletta-dev-app
High
CVE-2018-17145
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
Low
CVE-2020-15168
The `size` option isn't honored after following a redirect in node-fetch
Medium
CVE-2020-24660
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Low
ghsa-vpgc-7h78-gx8f
personnummer/js vulnerable to Improper Input Validation
High
ghsa-5vj8-3v2h-h38v
Remote Code Execution in next
High
CVE-2020-36649
Regular Expression Denial of Service in papaparse
High
CVE-2020-13110
DLL Injection in kerberos
Medium
CVE-2020-7608
yargs-parser Vulnerable to Prototype Pollution
High
ghsa-6x33-pw7p-hmpq
Denial of Service in http-proxy
High
ghsa-rhc3-76jw-4f2x
Denial of Service in @commercial/ammo
Critical
CVE-2019-0219
Privilege Escalation in cordova-plugin-inappbrowser
Low
ghsa-22h7-7wwg-qmgg
Prototype Pollution in @hapi/hoek
High
ghsa-5ff8-jcf9-fw62
Cross-Site Scripting in markdown-it-katex
Critical
ghsa-rjvj-673q-4hfw
Command Injection in traceroute
Critical
ghsa-vjvw-wcmw-pr26
Insufficient Entropy in parsel
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.