High
CVE-2024-39701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 419
Reset filters
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Medium
CVE-2024-31217
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
Medium
CVE-2024-34075
kurwov vulnerable to Denial of Service due to improper data sanitization
Medium
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
High
CVE-2023-26158
mockjs vulnerable to Prototype Pollution via the Util.extend function
Medium
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
High
CVE-2023-30542
GovernorCompatibilityBravo may trim proposal calldata
Medium
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
High
CVE-2023-22491
gatsby-transformer-remark has possible unsanitized JavaScript code injection
High
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
Critical
CVE-2021-33420
replicator vulnerable to Deserialization of Untrusted Data
Critical
CVE-2022-2421
Insufficient validation when decoding a Socket.IO packet
Low
ghsa-whpx-q3rq-w8jc
Hardening of TypedArrays with non-canonical numeric property names in SES
Low
CVE-2022-39231
parse-server auth adapter app ID validation can be circumvented
Medium
CVE-2022-36083
JOSE vulnerable to resource exhaustion via specifically crafted JWE
High
CVE-2022-25852
pg-native and libpq vulnerable to uncontrolled resource consumption
High
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
High
CVE-2022-21227
Denial-of-Service when binding invalid parameters in sqlite3
Medium
CVE-2022-23646
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Medium
CVE-2021-43843
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
Low
CVE-2021-43838
Regular Expression Denial of Service (ReDoS) in jsx-slack
Critical
CVE-2021-23639
Code Injection in md-to-pdf.
High
ghsa-qm7x-rc44-rrqw
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.