Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Vanna vulnerable to SQL Injection
Sentry's Python SDK unintentionally exposes environment variables to subprocesses
yt-dlp File system modification and RCE through improper file-extension sanitization
OpaMiddleware does not filter HTTP OPTIONS requests
Local File Inclusion in Solara
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Aim denial of service vulnerability
Directory creation by malicious user in saltstack
Improper line feed handling in zenml
Path traversal in saltstack
Open redirect in gradio
h2o vulnerable to unexpected POST request shutting down server
pdoc embeds link to malicious CDN if math mode is enabled
Remote Code Execution in create_conda_env function in lollms
lollms vulnerable to path traversal due to unauthenticated root folder settings change
lollms vulnerable to dot-dot-slash path traversal in XTTS server
js2py allows remote code execution
Cross-site Scripting in djangorestframework
litellm vulnerable to improper access control in team management
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.