Critical
ghsa-4hm7-73ch-vm59
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,501
Reset filters
Critical
ghsa-3f97-rj68-2pjf
Malicious Package in buffe2-xor
Critical
ghsa-5ggx-g294-qj3q
Malicious Package in buffeb-xor
Critical
ghsa-8549-p68h-m9mc
Malicious Package in buffdr-xor
Critical
ghsa-w9q5-mvc6-5cw3
Malicious Package in bufder-xor
Critical
ghsa-f64g-whxf-w8f2
Malicious Package in buffar-xor
Critical
ghsa-6584-gfwm-3vc3
Malicious Package in budfer-xor
Critical
ghsa-p9g3-vpvp-hcj5
Malicious Package in bufber-xor
Critical
ghsa-vm67-mh96-95mq
Malicious Package in bubfer-xor
Critical
ghsa-8hrq-9wm7-v3jw
Malicious Package in btffer-xor
Critical
ghsa-pxqp-mv67-g528
Malicious Package in bqffer-xor
Critical
ghsa-7cvf-p83w-48q6
Malicious Package in beffer-xor
Critical
ghsa-jvfv-jhw9-jmpp
Malicious Package in b5ffer-xor
Critical
ghsa-mjjq-c88q-qhr6
Cross-Site Scripting in dompurify
Medium
ghsa-mfcp-34xw-p57x
Authentication Bypass in saml2-js
Medium
ghsa-5v7r-jg9r-vq44
Insecure Cryptography Algorithm in simple-crypto-js
Critical
ghsa-876r-hj45-fw7g
Sandbox Breakout / Arbitrary Code Execution in safer-eval
High
ghsa-ccrp-c664-8p4j
Cross-Site Scripting in markdown-to-jsx
Critical
CVE-2020-12265
Path Traversal in decompress
High
ghsa-cv3v-7846-6pxm
Unauthorized File Access in node-git-server
Low
ghsa-q3w9-g74q-vp5f
Denial of Service in express-fileupload
High
ghsa-phph-xpj4-wvcv
Cross-Site Scripting in hexo-admin
High
ghsa-mh5c-679w-hh4r
Denial of Service in mongodb
Critical
ghsa-8jf2-cq6v-w234
Malicious Package in uglyfi.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.