Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,501
Reset filtersArbitrary File Overwrite in decompress-zip
Malicious Package in stream-combine
Remote Code Execution in pi_video_recording
Improper Authorization in loopback
Cross-Site Scripting in bootstrap-vue
NoSQL Injection in loopback-connector-mongodb
Sandbox Breakout / Arbitrary Code Execution in sandbox
Malicious Package in portionfatty12
Malicious Package in rrgod
Malicious Package in commander-js
Cross-Site Scripting in semantic-ui-search
Sandbox Breakout / Arbitrary Code Execution in static-eval
Remote Code Execution in office-converter
Remote Code Execution in pomelo-monitor
Sensitive Data Exposure in rails-session-decoder
Cross-Site Scripting in mermaid
Remote Memory Exposure in bl
Command Injection in bestzip
Denial of Service in markdown-it-toc-and-anchor
Cross-Site Scripting in jingo
Cross-Site Scripting in md-data-table
Cross-Site Scripting in buefy
Entropy Backdoor in text-qrcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.