GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,365 advisories
Filter by severity
SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute...
High
Unreviewed
CVE-2022-26982
was published
Apr 6, 2022
In all versions of GitLab CE/EE, certain Unicode characters can be abused to commit malicious...
High
Unreviewed
CVE-2021-39908
was published
Apr 3, 2022
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who...
High
Unreviewed
CVE-2022-1159
was published
Apr 3, 2022
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is...
High
Unreviewed
CVE-2022-0687
was published
Mar 22, 2022
A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434...
High
Unreviewed
CVE-2020-25197
was published
Mar 19, 2022
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad...
High
Unreviewed
CVE-2022-0944
was published
Mar 16, 2022
Code Injection in CRI-O
High
CVE-2022-0811
was published
for
github.com/cri-o/cri-o
(Go)
Mar 15, 2022
Server-side Template Injection in nystudio107/craft-seomatic
High
CVE-2021-44618
was published
for
nystudio107/craft-seomatic
(Composer)
Mar 12, 2022
Static Code Injection in Microweber
High
CVE-2022-0895
was published
for
microweber/microweber
(Composer)
Mar 11, 2022
The absence of filters when loading some sections in the web application of the vulnerable device...
High
Unreviewed
CVE-2022-22985
was published
Mar 11, 2022
The absence of filters when loading some sections in the web application of the vulnerable device...
High
Unreviewed
CVE-2022-24915
was published
Mar 11, 2022
Improper Neutralization of Special Elements Used in a Template Engine in microweber
High
CVE-2022-0896
was published
for
microweber/microweber
(Composer)
Mar 10, 2022
This issue exists to document that a security improvement in the way that Jira Server and Data...
High
Unreviewed
CVE-2021-43944
was published
Mar 9, 2022
The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to...
High
Unreviewed
CVE-2022-0440
was published
Mar 8, 2022
HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is...
High
Unreviewed
CVE-2022-22909
was published
Mar 4, 2022
diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to...
High
Unreviewed
CVE-2021-41282
was published
Mar 3, 2022
Code injection in dolibarr/dolibarr
High
CVE-2022-0819
was published
for
dolibarr/dolibarr
(Composer)
Mar 3, 2022
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code...
High
Unreviewed
CVE-2022-25018
was published
Mar 2, 2022
AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,
High
Unreviewed
CVE-2021-44238
was published
Mar 2, 2022
There is a code injection vulnerability in smartphones. Successful exploitation of this...
High
Unreviewed
CVE-2021-22395
was published
Feb 26, 2022
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via...
High
Unreviewed
CVE-2022-24664
was published
Feb 17, 2022
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via...
High
Unreviewed
CVE-2022-24663
was published
Feb 17, 2022
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a...
High
Unreviewed
CVE-2022-24665
was published
Feb 17, 2022
Gitea Remote Code Execution
High
CVE-2019-11229
was published
for
github.com/go-gitea/gitea
(Go)
Feb 15, 2022
ProTip!
Advisories are also available from the
GraphQL API