Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Authentication Bypass in otpauth
Malicious Package in fast-requests
Malicious Package in cage-js
Malicious Package in rate-map
Cross-Site Scripting in dmn-js-properties-panel
Malicious Package in load-from-cwd-or-npm
Cross-Site Scripting in cmmn-js-properties-panel
Cross-Site Scripting in bpmn-js-properties-panel
Regular Expression Denial of Service in marked
Local File Inclusion in domokeeper
Malicious Package in nodes.js
Malicious Package in deasyncp
Malicious Package in sdfjghlkfjdshlkjdhsfg
Prototype Pollution in lodash.mergewith
Prototype Pollution in lodash.defaultsdeep
Prototype Pollution in lodash.mergewith
Prototype Pollution in lodash.defaultsdeep
Prototype Pollution in lodash.merge
Prototype Pollution in lodash.merge
Malicious Package in tiar
Malicious Package in secure_identity_login_module
Malicious Package in river-mock
Malicious Package in retcodelog
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.