Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersCross-Site Scripting in @novnc/novnc
Server secret was included in static assets and served to clients
XSS due to lack of CSRF validation for replying/publishing
Sandbox Breakout / Arbitrary Code Execution in safe-eval
Cross-Site Scripting in highcharts
Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt
DOM-based XSS in auth0-lock
Server-Side Request Forgery in ftp-srv
Server-Side Request Forgery in @uppy/companion
Cross-Site Scripting in @progress/kendo-angular-editor
Insecure serialization leading to RCE in serialize-javascript
Cross-site scripting vulnerability in TinyMCE
Cross-Site Scripting in Prism
XSS via JQLite DOM manipulation functions in AngularJS
CSRF Vulnerability in polaris-website
Denial of service in fastify
Prototype Pollution in express-fileupload
CSRF vulnerability in save-server
False-positive validity for NFT1 genesis transactions
False-positive validity for NFT1 genesis transactions in SLPJS
dot-prop Prototype Pollution vulnerability
Signature Malleabillity in elliptic
Directory traversal in rollup-plugin-server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.