Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 529
Reset filtersImageMagick has an Out-of-bounds Write via InterpretImageFilename
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
ImageMagick: MSL - Stack overflow in ProcessMSLScript
.NET Denial of Service Vulnerability
.NET Denial of Service Vulnerability
.NET Elevation of Privilege Vulnerability
Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.