Medium
CVE-2022-21721
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,491
Reset filters
High
CVE-2021-23664
Server side request forgery in @isomorphic-git/cors-proxy
High
CVE-2022-21676
Uncaught Exception in engine.io
Medium
CVE-2022-21671
Potential exposure of tokens to an Unauthorized Actor
Critical
ghsa-2w8g-m5j8-7m87
Zalgo-like output that crashes the server
High
CVE-2022-21667
Denial of Service in soketi
High
CVE-2022-0086
uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2020-1026
Incorrect Calculation in the MSR JavaScript Cryptography Library
High
CVE-2021-23797
Path Traversal in http-server-node
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
High
CVE-2021-43803
Unexpected server crash in Next.js.
Medium
CVE-2021-23718
Server-Side Request Forgery in ssrf-agent
High
CVE-2021-40829
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-40828
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-41174
XSS vulnerability allowing arbitrary JavaScript execution
High
ghsa-qm7x-rc44-rrqw
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
High
CVE-2021-41249
XSS vulnerability in GraphQL Playground from untrusted schemas
High
CVE-2021-41248
GraphiQL introspection schema template injection attack
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
High
CVE-2021-22964
DOS and Open Redirect with user input
High
CVE-2021-21278
Risk of code injection
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
High
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Medium
CVE-2019-5444
Path Traversal in serve-here.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.