GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
43 advisories
Filter by severity
IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be...
Moderate
Unreviewed
CVE-2021-20464
was published
Apr 23, 2022
It has been discovered that redhat-certification does not properly limit the number of recursive...
High
Unreviewed
CVE-2018-10868
was published
May 24, 2022
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack...
High
Unreviewed
CVE-2021-40511
was published
Jun 22, 2022
Dell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI. A guest privilege...
High
Unreviewed
CVE-2022-34430
was published
Oct 11, 2022
A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All...
Moderate
Unreviewed
CVE-2022-34467
was published
Jul 13, 2022
In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials...
Moderate
Unreviewed
CVE-2022-44641
was published
Nov 18, 2022
The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0...
Moderate
Unreviewed
CVE-2019-20104
was published
May 24, 2022
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by...
Moderate
Unreviewed
CVE-2020-9354
was published
May 24, 2022
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML...
Moderate
Unreviewed
CVE-2020-4481
was published
May 24, 2022
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML...
Moderate
Unreviewed
CVE-2020-24589
was published
May 24, 2022
IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack...
Moderate
Unreviewed
CVE-2020-4377
was published
May 24, 2022
Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3...
Moderate
Unreviewed
CVE-2020-24052
was published
May 24, 2022
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates....
Moderate
Unreviewed
CVE-2020-24591
was published
May 24, 2022
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML...
Moderate
Unreviewed
CVE-2020-27017
was published
May 24, 2022
An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing...
High
Unreviewed
CVE-2020-25186
was published
May 24, 2022
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity...
Moderate
Unreviewed
CVE-2020-24665
was published
May 24, 2022
A stack overflow in pupnp 1.16.1 can cause the denial of service through the Parser_parseDocument...
High
Unreviewed
CVE-2021-28302
was published
May 24, 2022
A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could...
Moderate
Unreviewed
CVE-2021-1267
was published
May 24, 2022
IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...
High
Unreviewed
CVE-2021-20453
was published
May 24, 2022
Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related...
Moderate
Unreviewed
CVE-2020-15303
was published
May 24, 2022
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...
Moderate
Unreviewed
CVE-2021-3541
was published
May 24, 2022
Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different...
High
Unreviewed
CVE-2021-38490
was published
May 24, 2022
XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior...
Moderate
Unreviewed
CVE-2021-31842
was published
May 24, 2022
Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the...
High
Unreviewed
CVE-2023-49967
was published
Dec 7, 2023
libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which...
High
Unreviewed
CVE-2003-1564
was published
Apr 29, 2022
ProTip!
Advisories are also available from the
GraphQL API