Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,655
Maven
5,000+
npm
4,284
NuGet
760
pip
4,067
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,854 advisories

Loading
Cross-site Scripting in livehelperchat Moderate
CVE-2022-0370 was published for remdex/livehelperchat (Composer) Jan 28, 2022
Cross-site Scripting in livehelperchat Moderate
CVE-2022-0387 was published for remdex/livehelperchat (Composer) Jan 28, 2022
Cross-site Scripting when rendering error messages in laminas-form Moderate
CVE-2022-23598 was published for laminas/laminas-form (Composer) Jan 28, 2022
Xerkus
Credited to Xerkus
Cross-site Scripting in LiveHelperChat Moderate
CVE-2022-0395 was published for remdex/livehelperchat (Composer) Jan 29, 2022
Path Traversal in the Logs plugin for Craft CMS Moderate
CVE-2022-23409 was published for ether/logs (Composer) Feb 1, 2022
Cross-site Scripting in showdoc Moderate
CVE-2021-4172 was published for showdoc/showdoc (Composer) Feb 1, 2022
Cross-site Scripting in LiveHelperChat Moderate
CVE-2022-0394 was published for remdex/livehelperchat (Composer) Feb 1, 2022
Dolibarr vulnerable to Improper Validation of Specified Quantity in Input Moderate
CVE-2022-0414 was published for dolibarr/dolibarr (Composer) Feb 1, 2022
RosarioSIS XSS Vulnerability Moderate
CVE-2021-45416 was published for francoisjacquet/rosariosis (Composer) Feb 2, 2022
Cross-site Scripting in Beanstalk console Moderate
CVE-2022-0501 was published for ptrofimov/beanstalk_console (Composer) Feb 6, 2022
Business Logic Errors in SilverStripe Framework Moderate
CVE-2022-0227 was published for silverstripe/framework (Composer) Feb 6, 2022
Unrestricted Upload of File with Dangerous Type in jsdecena/laracom Moderate
CVE-2022-0472 was published for jsdecena/laracom (Composer) Feb 6, 2022
Cross-site Scripting in LiveHelperChat Moderate
CVE-2022-0502 was published for remdex/livehelperchat (Composer) Feb 7, 2022
Cross-site Scripting pimcore Moderate
CVE-2022-0510 was published for pimcore/pimcore (Composer) Feb 9, 2022
Cross-site Scripting in pimcore Moderate
CVE-2022-0509 was published for pimcore/pimcore (Composer) Feb 9, 2022
Cross-site Scripting in microweber Moderate
CVE-2022-0506 was published for microweber/microweber (Composer) Feb 9, 2022
Generation of Error Message Containing Sensitive Information in microweber Moderate
CVE-2022-0504 was published for microweber/microweber (Composer) Feb 9, 2022
Cross-Site Request Forgery in microweber Moderate
CVE-2022-0505 was published for microweber/microweber (Composer) Feb 9, 2022
Cross-site Scripting in Beanstalk console Moderate
CVE-2022-0539 was published for ptrofimov/beanstalk_console (Composer) Feb 10, 2022
Studio 42 elFinder allows stored XSS Moderate
CVE-2021-45919 was published for studio-42/elfinder (Composer) Feb 10, 2022
Cross-site Scripting in Contao Moderate
CVE-2018-10125 was published for contao/contao (Composer) Feb 10, 2022
Cross-site Scripting in RosarioSIS Moderate
CVE-2020-15721 was published for francoisjacquet/rosariosis (Composer) Feb 10, 2022
Cross-Site Request Forgery in CakePHP Moderate
CVE-2020-15400 was published for cakephp/cakephp (Composer) Feb 10, 2022
markstory
Credited to markstory
Unrestricted Uploads in Concrete5 Moderate
CVE-2020-14961 was published for concrete5/concrete5 (Composer) Feb 10, 2022
Cross-site scripting in forkcms Moderate
CVE-2020-23263 was published for forkcms/forkcms (Composer) Feb 10, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database