Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 919
Reset filtersHono Improper Authorization vulnerability
Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers
happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript
Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails
Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs
Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
SillyTavern Web Interface Vulnerable DNS Rebinding
Flowise vulnerable to RCE via Dynamic function constructor injection
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Flowise vulnerable to XSS
get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass
apidoc-core is vulnerable to prototype pollution
dref is vulnerable to prototype pollution
parse is vulnerable to prototype pollution
spmrc vulnerable to prototype pollution
web3-core-method is vulnerable to prototype pollution
toggle-array vulnerable to prototype pollution
json-schema-editor-visual vulnerable to prototype pollution
csvjson vulnerable to prototype injection
mpregular vulnerable to prototype pollution
sassdoc-extras vulnerable to prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.