Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersXSS in knockout
Cross-Site Scripting in http_server
Path Traversal in statics-server
Validation Bypass in kind-of
Directory Traversal in Next.js
Incorrect Account Used for Signing
Prototype Pollution in Dojox
Prototype pollution in dojo
Holder can (re)create authentic credentials after receiving a credential in vp-toolkit
Holder can generate proof of ownership for credentials it does not control in vp-toolkit
Information disclosure in parse-server
discord-html not escaping HTML code blocks when lacking a language identifier
Denial of Service in uap-core when processing crafted User-Agent strings
codecov NPM module allows remote attackers to execute arbitrary commands
TaffyDB can allow access to any data items in the DB
Yarn Improper link resolution before file access (Link Following)
OS command injection in aws-lambda
OS command injection in git-diff-apply
Command Injection in node-df
AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode
auth0-lock vulnerable to XSS via unsanitized placeholder property
Malicious takeover of previously owned ENS names
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.