When Monitor says something may affect you

New security problems are found in popular software every day. Monitor watches for the ones in the software your sites are built with and tells you in plain words.

Why it says "may"

A scan can see what your site is built with, like Next.js or WordPress, but usually not the exact version. The problem only affects some versions. So Monitor can't tell whether your site is affected, only that it could be. When you send your package versions, Monitor checks them and says Affects you when one of them is affected.

Deciding in a few minutes

1. Read What happened. It says what kind of problem it is and what an attacker could do.
2. Check your version. Your developer, your host's dashboard or your project's settings can tell you which version you run.
3. Compare with What to do. It names the fixed version when there is one. If you already run it or newer, you're done.
4. If not, update. Copy the update prompt into your AI or send it to your developer.
5. Mark it handled for that site, so it leaves your list.

Problems marked Actively exploited are already being used by attackers, so update those first.