Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersCross-site Scripting in jquery-ui
jquery-ui Tooltip widget vulnerable to XSS
Deserialization Code Execution in js-yaml
Regular Expression Denial of Service in semver
Regular Expression Denial of Service in ms
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Regular Expression Denial of Service in marked
Cross-Site Scripting in mustache
Symlink Arbitrary File Overwrite in tar
Root Path Disclosure in send
Regular Expression Denial of Service in uglify-js
Cross-Site Scripting in serve-index
Directory Traversal in geddy
VBScript Content Injection in marked
SQL Injection in sequelize
dns-sync command injection vulnerability
Arbitrary JavaScript Execution in bassmaster
CORS Token Disclosure in crumb
Potential for Script Injection in syntax-error
Denial-of-Service Memory Exhaustion in qs
Directory Traversal in send
File Descriptor Leak Can Cause DoS Vulnerability in hapi
Multiple XSS Filter Bypasses in validator
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.