Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,747
Erlang
35
GitHub Actions
29
Go
2,321
Maven
5,000+
npm
3,955
NuGet
712
pip
3,736
Pub
12
RubyGems
921
Rust
972
Swift
38
Unreviewed advisories
All unreviewed
5,000+

131 advisories

Loading
Magento Open Source allows Cross-Site Scripting (XSS) Low
CVE-2023-38219 was published for magento/community-edition (Composer) Oct 13, 2023
Winter CMS stored XSS through privileged upload of SVG file Low
CVE-2023-37269 was published for wintercms/winter (Composer) Jul 7, 2023
abhishekmorla
Magento Open Source allows Cross-Site Scripting (XSS) Low
CVE-2023-22249 was published for magento/community-edition (Composer) Jul 6, 2023
CraftCMS stored XSS in Quick Post widget error message Low
CVE-2023-33194 was published for craftcms/cms (Composer) May 26, 2023
WhiteBearVN
Stored cross site scripting in RSS displayer Low
CVE-2023-28820 was published for concrete5/concrete5 (Composer) Apr 28, 2023
Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names Low
CVE-2023-28819 was published for concrete5/concrete5 (Composer) Apr 28, 2023
MarkLee131
AzuraCast/AzuraCast vulnerable to cross-site scripting Low
CVE-2023-2191 was published for azuracast/azuracast (Composer) Apr 20, 2023
Cross site scripting in Concrete CMS Low
CVE-2022-30120 was published for concrete5/core (Composer) Jun 25, 2022
Drupal cross-site scripting vulnerability via actions feature and trigger module Low
CVE-2010-3094 was published for drupal/drupal (Composer) May 17, 2022
Joomla! vulnerable to Cross-site Scripting Low
CVE-2011-4332 was published for joomla/joomla-cms (Composer) May 17, 2022
phpMyAdmin Multiple XSS Vulnerabilities Low
CVE-2012-4579 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
Typo3 Backend XSS Vulnerabilities Low
CVE-2012-1606 was published for typo3/cms (Composer) May 17, 2022
phpMyAdmin Vulnerable to Cross-Site Scripting Low
CVE-2011-1940 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin vulnerable to Cross-site Scripting Low
CVE-2011-4634 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin multiple cross-site scripting vulnerabilities Low
CVE-2012-5339 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page Low
CVE-2012-4345 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting Low
CVE-2014-6296 was published for jbartels/wec-map (Composer) May 17, 2022
phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save Low
CVE-2011-3591 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin Multiple XSS Vulnerabilities Low
CVE-2011-3592 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin cross-site scripting Vulnerability via ENUM value Low
CVE-2014-7217 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
concrete5 vulnerable to Cross-site Scripting Low
CVE-2015-3989 was published for concrete5/concrete5 (Composer) May 17, 2022
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names Low
CVE-2014-4986 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value Low
CVE-2013-5002 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
Joomla! Cross-site Scripting vulnerability Low
CVE-2013-5583 was published for joomla/joomla-cms (Composer) May 17, 2022
typo3/cms-felogin Cross-site Scripting vulnerability Low
CVE-2008-5656 was published for typo3/cms-felogin (Composer) May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database