Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,482
Reset filtersCross-Site Scripting in express-cart
Prototype Pollution in smart-extend
Command Injection in tomato
Improper Authorization in googleapis
Denial of Service in serialize-to-js
Arbitrary File Overwrite in decompress-zip
Malicious Package in stream-combine
Remote Code Execution in pi_video_recording
Improper Authorization in loopback
Cross-Site Scripting in bootstrap-vue
NoSQL Injection in loopback-connector-mongodb
Sandbox Breakout / Arbitrary Code Execution in sandbox
Malicious Package in portionfatty12
Malicious Package in rrgod
Malicious Package in commander-js
Cross-Site Scripting in semantic-ui-search
Sandbox Breakout / Arbitrary Code Execution in static-eval
Remote Code Execution in office-converter
Remote Code Execution in pomelo-monitor
Sensitive Data Exposure in rails-session-decoder
Cross-Site Scripting in mermaid
Remote Memory Exposure in bl
Command Injection in bestzip
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.