GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,866
Erlang
36
GitHub Actions
36
Go
2,491
Maven
5,000+
npm
4,110
NuGet
735
pip
3,933
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
4,867 advisories
Filter by severity
Browsershot Server-Side Request Forgery (SSRF) via setURL() Function
High
CVE-2025-3192
was published
for
spatie/browsershot
(Composer)
Apr 4, 2025
API Platform Core can leak exceptions message that may contain sensitive information
Moderate
CVE-2023-47639
was published
for
api-platform/core
(Composer)
Apr 3, 2025
Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)
Moderate
CVE-2025-3153
was published
for
concrete5/concrete5
(Composer)
Apr 3, 2025
Drupal Obfuscate Vulnerable to Stored Cross-Site Scripting (XSS)
Moderate
CVE-2025-3130
was published
for
drupal/obfuscate
(Composer)
Apr 3, 2025
Yeswiki Path Traversal vulnerability allows arbitrary read of files
High
CVE-2025-31131
was published
for
yeswiki/yeswiki
(Composer)
Apr 1, 2025
Drupal RapiDoc OAS Field Formatter Cross-Site Scripting (XSS) vulnerability
Low
CVE-2025-31696
was published
for
drupal/rapidoc_elements_field_formatter
(Composer)
Apr 1, 2025
Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes
Low
CVE-2025-31697
was published
for
drupal/formatter_suite
(Composer)
Apr 1, 2025
Drupal AI Vulnerable to OS Command Injection via Optional Automator Types
Moderate
CVE-2025-31692
was published
for
drupal/ai
(Composer)
Apr 1, 2025
Drupal OAuth2 Server Missing Authorization vulnerability
High
CVE-2025-31691
was published
for
drupal/oauth2_server
(Composer)
Apr 1, 2025
Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability
Low
CVE-2025-31695
was published
for
drupal/link_field_display_mode_formatter
(Composer)
Apr 1, 2025
Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing
High
CVE-2025-31694
was published
for
drupal/tfa
(Composer)
Apr 1, 2025
Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages
Moderate
CVE-2025-3057
was published
for
drupal/core
(Composer)
Apr 1, 2025
Drupal Matomo Analytics Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31680
was published
for
drupal/matomo
(Composer)
Apr 1, 2025
Drupal Google Tag Cross-Site Request Forgery (CSRF)
Moderate
CVE-2025-31683
was published
for
drupal/google_tag
(Composer)
Apr 1, 2025
Drupal Configuration Split Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31688
was published
for
drupal/config_split
(Composer)
Apr 1, 2025
Drupal SpamSpan Cross-Site Scripting (XSS) vulnerability
Low
CVE-2025-31687
was published
for
drupal/spamspan
(Composer)
Apr 1, 2025
Drupal Authenticator Login Missing Authorization vulnerability
High
CVE-2025-31681
was published
for
drupal/alogin
(Composer)
Apr 1, 2025
Drupal Open Social Missing Authorization vulnerability
Moderate
CVE-2025-31685
was published
for
goalgorilla/open_social
(Composer)
Apr 1, 2025
Drupal Google Tag Cross-Site Scripting (XSS) vulnerability
Moderate
CVE-2025-31682
was published
for
drupal/google_tag
(Composer)
Apr 1, 2025
Drupal OAuth2 Client Cross-Site Request Forgery (CSRF)
Low
CVE-2025-31684
was published
for
drupal/oauth2_client
(Composer)
Apr 1, 2025
Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability
Moderate
CVE-2025-31689
was published
for
drupal/gdpr
(Composer)
Apr 1, 2025
Drupal Cache Utility Cross-Site Request Forgery (CSRF) vulnerability
Moderate
CVE-2025-31690
was published
for
drupal/cache_utility
(Composer)
Apr 1, 2025
Drupal Ignition Cross-Site Scripting (XSS) vulnerability
Moderate
CVE-2025-31679
was published
for
drupal/ignition
(Composer)
Apr 1, 2025
Drupal AI Vulnerable to OS Command Injection
Moderate
CVE-2025-31693
was published
for
drupal/ai
(Composer)
Apr 1, 2025
Drupal Open Social Missing Authorization vulnerability
High
CVE-2025-31686
was published
for
goalgorilla/open_social
(Composer)
Apr 1, 2025
ProTip!
Advisories are also available from the
GraphQL API