GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,150
NuGet
736
pip
3,952
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
140 advisories
Filter by severity
Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V (Artprima) AP...
High
Unreviewed
CVE-2025-58855
was published
Sep 5, 2025
In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability (Formula...
High
Unreviewed
CVE-2022-22121
was published
Jan 11, 2022
An issue was discovered in Archer Technology RSA Archer 6.11.00204.10014 allowing attackers to...
High
Unreviewed
CVE-2025-50572
was published
Jul 31, 2025
Alkacon OpenCMS CSV Injection via New User module
High
CVE-2019-11819
was published
for
org.opencms:opencms-core
(Maven)
May 24, 2022
The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in...
High
Unreviewed
CVE-2022-3604
was published
Jan 16, 2024
MantisBT CSV Injection unprivileged user access in csv_export.php
High
CVE-2021-43257
was published
for
mantisbt/mantisbt
(Composer)
Apr 15, 2022
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to...
High
Unreviewed
CVE-2022-37905
was published
Dec 12, 2022
PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows...
High
Unreviewed
CVE-2023-51311
was published
Feb 20, 2025
PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows...
High
Unreviewed
CVE-2023-51333
was published
Feb 20, 2025
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which...
High
Unreviewed
CVE-2023-51336
was published
Feb 20, 2025
PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows...
High
Unreviewed
CVE-2023-51319
was published
Feb 20, 2025
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an...
High
Unreviewed
CVE-2023-51302
was published
Feb 19, 2025
KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function.
High
Unreviewed
CVE-2023-46401
was published
Jan 24, 2025
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An...
High
Unreviewed
CVE-2024-22063
was published
Dec 30, 2024
A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via...
High
Unreviewed
CVE-2024-53555
was published
Nov 26, 2024
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is...
High
Unreviewed
CVE-2018-11525
was published
May 13, 2022
An issue in Snipe-IT v.7.0.13 build 15514 allows a remote attacker to escalate privileges via the...
High
Unreviewed
CVE-2024-51094
was published
Nov 12, 2024
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute...
High
Unreviewed
CVE-2021-38963
was published
Sep 25, 2024
Refuel Autolab Eval Injection vulnerability
High
CVE-2024-27320
was published
for
refuel-autolabel
(pip)
Sep 12, 2024
Refuel Autolab Eval Injection vulnerability
High
CVE-2024-27321
was published
for
refuel-autolabel
(pip)
Sep 12, 2024
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in...
High
Unreviewed
CVE-2024-24337
was published
Feb 13, 2024
A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows...
High
Unreviewed
CVE-2024-41226
was published
Aug 6, 2024
A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated...
High
Unreviewed
CVE-2024-3232
was published
Jul 16, 2024
The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up...
High
Unreviewed
CVE-2023-5527
was published
Jun 18, 2024
ProTip!
Advisories are also available from the
GraphQL API