Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 738
Reset filtersRemote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Langroid Allows XXE Injection via XMLToolMessage
Malicious code in instructor-mcp (PyPI)
Malicious code in dreamgen (PyPI)
InvokeAI Uncontrolled Resource Consumption vulnerability
FastChat Denial of Service vulnerability
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
MobSF Partial Denial of Service (DoS)
Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint
MobSF Stored Cross-Site Scripting (XSS)
PyJWT Issuer field partial matches allowed
changedetection.io Path Traversal
MindsDB Cross-site Scripting vulnerability
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function
FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function
Sentry vulnerable to stored Cross-Site Scripting (XSS)
ydata cross-site scripting
PyMongo Out-of-bounds Read in the bson module
Slack integration leaks sensitive information in logs
code injection vulnerability exists in the huggingface/text-generation-inference repository
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.