Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,364
Reset filtersEthyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
Langchain Server-Side Request Forgery vulnerability
Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Fides Information Disclosure Vulnerability in Config API Endpoint
Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Fides JavaScript Injection Vulnerability in Privacy Center URL
TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
PDM Trojan Lockfile
OpenStack Barbican credential leak flaw
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
Ansible may expose private key
Zope vulnerable to Stored Cross Site Scripting with SVG images
pgAdmin failed to properly control the server code
Gradio arbitrary file upload vulnerability
OpenStack Barbican information disclosure vulnerability
OpenStack Heat information leak vulnerability
Apache HDFS Provider error message suggested
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it
Pyramid static view path traversal up one directory
Remote Code Execution in Custom Integration Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.