High
CVE-2021-37713
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,624
Reset filters
High
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
High
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Critical
CVE-2021-32685
Improper Verification of Cryptographic Signature
Medium
CVE-2021-32684
Missing Handler in @scandipwa/magento-scripts
Medium
CVE-2021-32659
Automatic room upgrade handling can be used maliciously to bridge a room non-consentually
Medium
CVE-2021-32640
ReDoS in Sec-Websocket-Protocol header
Low
ghsa-jcgr-9698-82jx
Improper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/build
Critical
CVE-2020-7770
Prototype pollution in json8
High
CVE-2020-7766
Arbitrary Code Execution in json-ptr
Medium
CVE-2021-3163
Cross-site Scripting in quill
High
CVE-2020-7712
trentm/json vulnerable to command injection
Medium
CVE-2021-26540
Improper Input Validation in sanitize-html
Medium
CVE-2021-31712
Cross-site Scripting in React Draft Wysiwyg
Medium
CVE-2019-10796
OS Command Injection in rpi
High
CVE-2019-10799
OS Command Injection in compile-sass
High
CVE-2019-10804
OS Command Injection in serial-number
Critical
CVE-2019-10802
OS Command Injection in giting
Medium
ghsa-xmh9-rg6f-j3mr
Verification flaw in Solid identity-token-verifier
Low
CVE-2021-21322
Prefix escape
Critical
CVE-2021-21321
Prefix escape
Medium
CVE-2021-3189
Open redirect in Slashify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.