Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 197
Reset filtersOpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
.NET Denial of Service Vulnerability
Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
Umbraco CMS contains a server-side request forgery vulnerability
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
Umbraco CMS has an arbitrary file upload vulnerability
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Akka.Remote TLS did not properly implement certificate-based authentication
DNN allows loading unused themes on anonymous clients through query parameters
Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain
ImageMagick BlobStream Forward-Seek Under-Allocation
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.