GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,121
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
12,423 advisories
Filter by severity
A vulnerability has been identified in Keycloak that could lead to unauthorized information...
Low
Unreviewed
CVE-2025-5416
was published
Jun 20, 2025
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The...
Low
Unreviewed
CVE-2024-20920
was published
Jan 17, 2024
The issue was addressed with improved validation of environment variables. This issue is fixed in...
Low
Unreviewed
CVE-2023-40394
was published
Jan 11, 2024
Alkacon OpenCMS XSS via New User module
Low
CVE-2019-11818
was published
for
org.opencms:opencms-core
(Maven)
May 24, 2022
Alkacon OpenCMS XSS via title and requestedResource parameters
Low
CVE-2013-4600
was published
for
org.opencms:opencms-core
(Maven)
May 17, 2022
Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters
Low
CVE-2015-2351
was published
for
org.opencms:opencms-core
(Maven)
May 14, 2022
Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp
Low
CVE-2008-1753
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter
Low
CVE-2008-1510
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
Alkacon Open CMS XSS via Logfile Viewer Settings function
Low
CVE-2008-1300
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp
Low
CVE-2008-1045
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
Alkacon OpenCms XSS via query parameter in a search action
Low
CVE-2006-2571
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
Alkacon OpenCms XSS via unsanitized message body
Low
CVE-2006-3933
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
Alkacon OpenCms XSS via username during login
Low
CVE-2005-4294
was published
for
org.opencms:opencms-core
(Maven)
May 1, 2022
PowSyBl Core XML Reader allows XXE and SSRF
Low
CVE-2025-47293
was published
for
com.powsybl:powsybl-commons
(Maven)
Jun 19, 2025
Withdrawn Advisory: microlight.js has a null pointer dereference vulnerability
Low
CVE-2025-45525
was published
for
microlight
(npm)
Jun 17, 2025
•
withdrawn
Apache SeaTunnel: Unauthenticated insecure access
Low
CVE-2025-32896
was published
for
org.apache.seatunnel:seatunnel-engine-common
(Maven)
Jun 19, 2025
An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local ...
Low
Unreviewed
CVE-2025-29871
was published
Jun 6, 2025
HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints...
Low
Unreviewed
CVE-2023-50346
was published
Jan 3, 2024
HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application...
Low
Unreviewed
CVE-2023-50348
was published
Jan 3, 2024
Grafana long dashboard title or panel name causes unresponsives
Low
CVE-2025-1088
was published
for
github.com/grafana/grafana
(Go)
Jun 18, 2025
Withdrawn Advisory: microlight allows a denial of service
Low
CVE-2025-45526
was published
for
microlight
(npm)
Jun 17, 2025
•
withdrawn
ash_authentication_phoenix has Insufficient Session Expiration
Low
CVE-2025-4754
was published
for
ash_authentication_phoenix
(Erlang)
Jun 17, 2025
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...
Low
Unreviewed
CVE-2023-28197
was published
Jan 11, 2024
A path handling issue was addressed with improved validation. This issue is fixed in macOS...
Low
Unreviewed
CVE-2023-40383
was published
Jan 11, 2024
A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as...
Low
Unreviewed
CVE-2025-4215
was published
May 2, 2025
ProTip!
Advisories are also available from the
GraphQL API