GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,675
Maven
5,000+
npm
4,297
NuGet
760
pip
4,077
Pub
12
RubyGems
957
Rust
1,058
Swift
45
Unreviewed advisories
All unreviewed
5,000+
2,866 advisories
Filter by severity
OroPlatform Forced Redirect to External Website
Moderate
GHSA-3vhm-q4w3-rw8q
was published
for
oro/platform
(Composer)
May 20, 2024
OroCRM Forced Redirect to External Website
Moderate
GHSA-v8hp-239v-9367
was published
for
oro/crm
(Composer)
May 20, 2024
onelogin/php-saml signature wrapping attacks
Moderate
CVE-2016-1000253
was published
for
onelogin/php-saml
(Composer)
May 17, 2024
Privilege Escalation in TYPO3 Neos
Moderate
GHSA-43cf-7f3h-38rg
was published
for
neos/neos
(Composer)
May 17, 2024
Time-Based Information Disclosure Vulnerability in Flow
Moderate
GHSA-6pq8-67pw-j6hw
was published
for
neos/flow
(Composer)
May 17, 2024
Neos Flow Information disclosure in entity security
Moderate
GHSA-9cw3-j7wg-jwj8
was published
for
neos/flow
(Composer)
May 17, 2024
Neos Flow Arbitrary file upload and XML External Entity processing
Moderate
GHSA-5vv7-j593-mgjc
was published
for
neos/flow
(Composer)
May 17, 2024
Magento Cross-Site Scripting (XSS) vulnerability
Moderate
GHSA-mcfc-67vm-j568
was published
for
magento/community-edition
(Composer)
May 15, 2024
Data Leakage Vulnerability in livewire/livewire
Moderate
GHSA-qwvp-268g-jjm8
was published
for
livewire/livewire
(Composer)
May 15, 2024
Insecure State Generation in laravel/socialite
Moderate
GHSA-h97c-qp24-439v
was published
for
laravel/socialite
(Composer)
May 15, 2024
State Guessing Vulnerability in laravel/socialite
Moderate
GHSA-7fjv-25q9-2w88
was published
for
laravel/socialite
(Composer)
May 15, 2024
Laravel Guard bypass in Eloquent models
Moderate
GHSA-44pg-c29v-hp6r
was published
for
laravel/framework
(Composer)
May 15, 2024
Laravel Cross-site Scripting (XSS) vulnerability in blade templating
Moderate
GHSA-vr95-p7q6-8m9q
was published
for
laravel/framework
(Composer)
May 15, 2024
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
Moderate
GHSA-7852-w36x-6mf6
was published
for
laravel/framework
(Composer)
May 15, 2024
Laravel Hijacked authentication cookies vulnerability
Moderate
GHSA-p62r-7637-3wwc
was published
for
laravel/framework
(Composer)
May 15, 2024
Laravel Risk of mass-assignment vulnerabilities
Moderate
GHSA-rj3w-99gc-8j58
was published
for
laravel/framework
(Composer)
May 15, 2024
Read private customer data reclaiming carts in Klaviyo Magento
Moderate
GHSA-hvgw-gg3p-295j
was published
for
klaviyo/magento2-extension
(Composer)
May 15, 2024
Laravel Cross-site Scripting vulnerability in blade templating
Moderate
GHSA-297g-xg4h-7w4c
was published
for
illuminate/view
(Composer)
May 15, 2024
Laravel Risk of mass-assignment vulnerabilities
Moderate
GHSA-cc2w-ghc5-m5qr
was published
for
illuminate/database
(Composer)
May 15, 2024
Laravel Hijacked authentication cookies vulnerability
Moderate
GHSA-q4xf-7fw5-4x8v
was published
for
illuminate/auth
(Composer)
May 15, 2024
fuel/core Crypt encryption compromised.
Moderate
GHSA-fgrx-4637-fcf5
was published
for
fuel/core
(Composer)
May 15, 2024
FOSUserBundle User Identity Validation Vulnerability
Moderate
GHSA-8wx3-8m4x-g5h4
was published
for
friendsofsymfony/user-bundle
(Composer)
May 15, 2024
FOSUserBundle Entropy is lost in the TokenGenerator
Moderate
GHSA-pjx8-984p-7p3x
was published
for
friendsofsymfony/user-bundle
(Composer)
May 15, 2024
FOSRestBundle issue with broken validation of JSONP callbacks
Moderate
GHSA-p9fg-j6ww-953m
was published
for
friendsofsymfony/rest-bundle
(Composer)
May 15, 2024
friendsofsymfony/oauth2-php open redirection in oauth
Moderate
GHSA-xm3x-4ph3-3x9c
was published
for
friendsofsymfony/oauth2-php
(Composer)
May 15, 2024
ProTip!
Advisories are also available from the
GraphQL API