Medium
CVE-2025-30225
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,629
Reset filters
High
CVE-2025-29907
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Critical
CVE-2025-71338
Flowise allows arbitrary file write to RCE
Critical
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
Medium
CVE-2025-27789
Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
High
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Low
CVE-2025-1467
tarteaucitron Cross-site Scripting (XSS)
Medium
CVE-2025-25285
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
High
CVE-2025-25283
parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
Critical
CVE-2025-24981
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
Critical
CVE-2025-24964
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Low
ghsa-r5w7-f542-q2j4
Potential DoS when using ContextLines integration
Medium
CVE-2025-24360
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Low
CVE-2024-6533
Directus has a DOM-Based cross-site scripting (XSS) via layout_options
Medium
CVE-2025-29049
MathLive's Lack of Escaping of HTML allows for XSS
Medium
CVE-2025-23221
Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify
Medium
CVE-2025-24010
Websites were able to send any requests to the development server and read the response in vite
Low
ghsa-m9c9-mc2h-9wjw
Lodestar snappy checksum issue
Low
ghsa-53rv-hcvm-rpp9
Lodestar snappy decompression issue
High
CVE-2024-56734
Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
Low
ghsa-m56h-5xx3-2jc2
Prototype pollution in jsii.configureCategories
High
CVE-2024-54151
Directus allows unauthenticated access to WebSocket events and operations
Medium
CVE-2024-53843
@dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling
High
CVE-2024-32965
@lobehub/chat Server Side Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.