GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
3,887 advisories
Filter by severity
silverstripe/framework has Cross-site Scripting vulnerability in page name
Moderate
GHSA-hhvj-mcrx-3vcf
was published
for
silverstripe/framework
(Composer)
May 27, 2024
silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField`
Moderate
GHSA-468j-6jrc-2rjx
was published
for
silverstripe/framework
(Composer)
May 27, 2024
silverstripe/framework's `Member.Name` is not escaped
Moderate
GHSA-r9vp-fp72-xgf7
was published
for
silverstripe/framework
(Composer)
May 27, 2024
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
Moderate
GHSA-frm9-7pm9-5rgc
was published
for
silverstripe/comments
(Composer)
May 27, 2024
PHP Server Monitor vulnerable to Cross-site Scripting
Moderate
CVE-2024-5312
was published
for
phpservermon/phpservermon
(Composer)
May 24, 2024
vxe-table Cross-site Scripting vulnerability
Low
CVE-2023-1001
was published
for
vxe-table
(npm)
May 24, 2024
silverstripe/framework ReadOnly transformation for formfields exploitable
Moderate
GHSA-97jm-g33h-f46g
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter
Moderate
GHSA-mpqj-f4v3-334h
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS in CMS Edit Page
Moderate
GHSA-m8v7-x398-pxrf
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe Form field validation message XSS vulnerability
Moderate
GHSA-j982-5jv7-v43r
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe framework is vulnerable to XSS in install.php
Moderate
GHSA-mqf5-275h-gf6r
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS in dev/build returnURL Parameter
Moderate
GHSA-hq4p-5mpr-jj9m
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS in Director::force_redirect()
Moderate
GHSA-jqp8-v74p-g8px
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS In FormAction
Moderate
GHSA-4h54-vwx9-3vr3
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS In rewritten hash links
Moderate
GHSA-34q6-xqxh-gq39
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS In GridField print
Moderate
GHSA-88jp-9jrv-6368
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe XSS in TreeDropdownField and TreeMultiSelectField
Moderate
GHSA-r32j-mr8p-hfp8
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Silverstripe IE requests not properly behaving with rewritehashlinks
Moderate
GHSA-5f5v-5c3v-gw5v
was published
for
silverstripe/framework
(Composer)
May 23, 2024
Eclipse Ditto vulnerable to Cross-site Scripting
Moderate
CVE-2024-5165
was published
for
org.eclipse.ditto:ditto
(Maven)
May 23, 2024
VuFind Server-Side Request Forgery (SSRF) vulnerability
Critical
CVE-2024-25737
was published
for
vufind/vufind
(Composer)
May 22, 2024
Silverstripe XSS vulnerability via VirtualPage
Moderate
GHSA-r97r-64vp-fghm
was published
for
silverstripe/cms
(Composer)
May 22, 2024
Silverpeas Core vulnerable to Cross Site Scripting
Moderate
CVE-2024-29392
was published
for
org.silverpeas.core:silverpeas-core
(Maven)
May 22, 2024
Silverstripe History XSS Vulnerability
Moderate
GHSA-6hh6-59j2-qrxw
was published
for
silverstripe/cms
(Composer)
May 22, 2024
Silverstripe admin XSS Vulnerability via WYSIWYG editor
Low
GHSA-779c-7w4p-2c4g
was published
for
silverstripe/admin
(Composer)
May 22, 2024
Shopware Non-Persistent XSS in the Frontend
Moderate
GHSA-jqr7-5h7r-ch8p
was published
for
shopware/shopware
(Composer)
May 21, 2024
ProTip!
Advisories are also available from the
GraphQL API