Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,336
Reset filtersSynapse Outgoing federation to specific hosts can be disabled by sending malicious invites
Synapse does not apply enough checks to servers requesting auth events of events in a room
Vyper vulnerable to integer overflow in loop
in-toto: PGP trust model not (fully) considered
Incorrect success value returned in vyper
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
MultipartParser denial of service with too many fields or files
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
vantage6 refresh tokens do not expire
Nautobot vulnerable to remote code execution via Jinja2 template rendering
Denial of service vulnerability when parsing multipart request body
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Sentry vulnerable to invite code reuse via cookie manipulation
`CHECK` failure in `SobolSample` via missing validation
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Segfault in `CompositeTensorVariantToComponents`
`CHECK` fail via inputs in `PyFunc`
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
`CHECK` fail in `BCast` overflow
Segfault via invalid attributes in `pywrap_tfe_src.cc`
FPE in `tf.image.generate_bounding_box_proposals`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.