Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filterslightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function
LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
lightrag-hku: JWT Algorithm Confusion Vulnerability
LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass
HKUDS LightRAG allows Path Traversal via function upload_to_input_dir
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.