Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filterspython-libarchive directory traversal
LLama Factory Remote OS Command Injection Vulnerability
ReDoS in giskard's transformation.py (GHSL-2024-324)
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
yt-dlp File system modification and RCE through improper file-extension sanitization
Aim denial of service vulnerability
sqlparse parsing heavily nested list leads to Denial of Service
yt-dlp: `--exec` command injection when using `%q` in yt-dlp on Windows (Bypass of CVE-2023-40581)
RCE in TranformGraph().to_dot_graph function
pyload Log Injection vulnerability
Ansible symlink attack vulnerability
TorchServe ZipSlip
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
Ansible galaxy-importer Path Traversal vulnerability
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
yt-dlp File Downloader cookie leak
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
Path traversal in spotipy
Path traversal in binwalk
sviehb/jefferson vulnerable to path traversal
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.