Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
fast-xml-builder Comment Value regex can be bypassed
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters
SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()
Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation in fast-xml-parser
fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)
fast-xml-parser has stack overflow in XMLBuilder with preserveOrder
fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names
fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)
fast-xml-parser has RangeError DoS Numeric Entities Bug
fast-xml-parser vulnerable to ReDOS at currency parsing
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
Druid ingestion system Authenticated users can read data from other sources than intended
fast-xml-parser vulnerable to Regex Injection via Doctype Entities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.