Medium
ghsa-8r4g-cg4m-x23c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,491
Reset filters
High
CVE-2020-26301
OS Command Injection in ssh2
High
CVE-2021-3810
Inefficient Regular Expression Complexity in code-server
Medium
CVE-2021-40823
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Critical
CVE-2021-47986
Incorrect version tags linked to external repository
High
CVE-2021-39109
Path traversal in atlasboard
High
CVE-2021-23430
Directory Traversal in startserver
High
CVE-2021-39187
Parse Server crashes with query parameter
Critical
CVE-2021-38384
Incorrect Authorization in serverless-offline
High
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
High
CVE-2021-39157
Improper Handling of Exceptional Conditions in detect-character-encoding
High
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
Medium
CVE-2021-39138
parse-server new anonymous user session acts as if it's created with password
Medium
CVE-2018-3718
vercel/serve allows access to restricted files if filename is URL encoded.
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Medium
CVE-2021-32738
Utils.readChallengeTx does not verify the server account signature
High
CVE-2021-32691
Auto-merging Person Records Compromised
Medium
CVE-2021-23387
Open Redirect in trailing-slash
Medium
CVE-2021-32640
ReDoS in Sec-Websocket-Protocol header
Medium
CVE-2020-7680
Cross-site Scripting in docsify
Medium
CVE-2020-7696
Credential leak in react-native-fast-image
Critical
CVE-2020-7684
Path traversal in rollup-plugin-serve
Medium
CVE-2020-15500
Cross-site scripting in TileServer GL
Medium
CVE-2020-7757
Path Traversal in droppy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.