Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,364
Reset filtersScancode.io Reflected Cross-Site Scripting (XSS) in license endpoint
pandasai vulnerable to prompt injection
Excessive Iteration in gRPC
Apache Airflow Spark Provider Improper Input Validation vulnerability
Privilege escalation via ApiTokensEndpoint
ScanCode.io command injection in docker image fetch process
Denial of service in neutron
Fides Webserver Vulnerable to SVG Bomb File Uploads
Fides Webserver Vulnerable to Zip Bomb File Uploads
Apache Airflow Apache Hive Provider Improper Input Validation vulnerability
yt-dlp File Downloader cookie leak
gRPC connection termination issue
gRPC Reachable Assertion issue
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Connection confusion in gRPC
jcvi vulnerable to Configuration Injection due to unsanitized user input
kiwitcms vulnerable to stored XSS via unrestricted files upload
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
Apache Airflow ODBC Provider Argument Injection vulnerability
Apache Airflow JDBC Provider Improper Input Validation vulnerability
Any file can be included with the pymdown-snippets extension
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.