GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,690
Maven
5,000+
npm
4,320
NuGet
760
pip
4,096
Pub
12
RubyGems
958
Rust
1,063
Swift
45
Unreviewed advisories
All unreviewed
5,000+
2,883 advisories
Filter by severity
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7944
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Cross-site Scripting Vulnerability
Moderate
CVE-2019-7940
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7938
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7935
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7934
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Information Disclosure
Moderate
CVE-2019-7898
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Cross-site Scripting Vulnerability
Moderate
CVE-2019-7909
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Information Disclosure
Moderate
CVE-2019-7899
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7897
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Injection Vulnerability
Moderate
CVE-2019-7889
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Cross-site Scripting Vulnerability
Moderate
CVE-2019-7887
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7882
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Cross-site Scripting Vulnerability
Moderate
CVE-2019-7875
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7853
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Path Disclosure
Moderate
CVE-2019-7852
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7874
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-8117
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Cross-site Scripting Vulnerability
Moderate
CVE-2019-7921
was published
for
magento/community-edition
(Composer)
May 24, 2022
TYPO3 Cross-site Scripting vulnerability in the file backend module
Moderate
CVE-2008-5644
was published
for
typo3/cms-backend
(Composer)
May 17, 2022
Drupal vulnerable to Cross-site Scripting
Moderate
CVE-2008-3218
was published
for
drupal/drupal
(Composer)
May 1, 2022
TYPO3 Unrestricted File Upload vulnerability
Moderate
CVE-2008-2717
was published
for
typo3/cms-core
(Composer)
May 1, 2022
phpMyAdmin vulnerable to XML external entity (XXE) injection attack
Moderate
CVE-2011-4107
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
Moodle vulnerable to Cross-site scripting
Moderate
CVE-2008-1502
was published
for
moodle/moodle
(Composer)
May 1, 2022
Smarty Does Not Consider Umask Values When Setting Permissions
Moderate
CVE-2009-5054
was published
for
smarty/smarty
(Composer)
May 2, 2022
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
Moderate
CVE-2009-3821
was published
for
apache-solr-for-typo3/solr
(Composer)
May 2, 2022
ProTip!
Advisories are also available from the
GraphQL API