Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,476
Reset filtersUnsafe Merging of CORS Configuration Conflict in hapi
API Admin Auth Weakness in tomato
Directory Traversal in st
Open Redirect in serve-static
Directory Traversal in nhouston
Hidden Directories Always Served in inert
Directory Traversal in fancy-server
Cross-Site Scripting in @novnc/novnc
Server secret was included in static assets and served to clients
Server-Side Request Forgery in ftp-srv
Server-Side Request Forgery in @uppy/companion
CSRF vulnerability in save-server
Directory traversal in rollup-plugin-server
Directory traversal in rollup-plugin-server
Storing Password in Local Storage
GraphQL: Security breach on Viewer query
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
Path Traversal in socket.io-file
ECDSA signature vulnerability of Minerva timing attack in jsrsasign
Information disclosure in SSB-DB
Introspection in schema validation in Apollo Server
Regular Expression Denial of Service in websocket-extensions (NPM package)
Command Injection in hot-formula-parser
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.