GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,972
Erlang
29
GitHub Actions
16
Go
1,762
Maven
4,983
npm
3,518
NuGet
609
pip
3,094
Pub
10
RubyGems
833
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+
8,633 advisories
Filter by severity
Cross-Site Scripting in status-board
Moderate
CVE-2019-15478
was published
for
status-board
(npm)
Sep 23, 2019
Cross-Site Scripting in cyberchef
Moderate
CVE-2019-15532
was published
for
cyberchef
(npm)
Aug 27, 2019
Cross-Site Scripting in @nuxt/devalue
Moderate
CVE-2019-13506
was published
for
@nuxt/devalue
(npm)
Jul 16, 2019
Cross-Site Scripting via JSONP
Moderate
GHSA-28hp-fgcr-2r4h
was published
for
angular
(npm)
Jun 27, 2019
Rate Limiting Bypass in express-brute
Moderate
GHSA-984p-xq9m-4rjw
was published
for
express-brute
(npm)
Jun 7, 2019
Cross-Site Scripting
Moderate
GHSA-94ww-22rx-493x
was published
for
flower
(pip)
Feb 24, 2021
•
withdrawn
Reverse Tabnapping in swagger-ui
Moderate
GHSA-x9p2-fxq6-2m5f
was published
for
swagger-ui
(npm)
Jun 20, 2019
Cross-Site Request Forgery (CSRF)
Moderate
GHSA-wj5j-xpcj-45gc
was published
for
devise_invitable
(RubyGems)
Feb 24, 2021
•
withdrawn
Remote Memory Exposure in floody
Moderate
GHSA-3p92-886g-qxpq
was published
for
floody
(npm)
Jun 4, 2019
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Moderate
GHSA-69p9-9qm9-h447
was published
for
safer-eval
(npm)
Aug 19, 2020
•
withdrawn
Open Redirect in ecstatic
Moderate
GHSA-x4rf-4mqf-cm8w
was published
for
ecstatic
(npm)
Aug 19, 2020
•
withdrawn
Content injection in marked
Moderate
GHSA-wjmf-58vc-xqjr
was published
for
marked
(npm)
Feb 25, 2021
•
withdrawn
Out-of-bounds Read in npmconf
Moderate
GHSA-57cf-349j-352g
was published
for
npmconf
(npm)
Jun 12, 2019
Cross-Site Scripting in marked
Moderate
GHSA-8wp3-cp9v-44fm
was published
for
marked
(npm)
Feb 25, 2021
•
withdrawn
Denial of Service in url-relative
Moderate
GHSA-86p3-4gfq-38f2
was published
for
url-relative
(npm)
Jun 5, 2019
Versions 0.3.2 and earlier of marked are affected by a cross-site scripting vulnerability even...
Moderate
GHSA-32vw-r77c-gm67
was published
for
marked
(npm)
Aug 3, 2020
•
withdrawn
Path Traversal in statics-server
Moderate
GHSA-74cp-qw7f-7hpw
was published
for
statics-server
(npm)
Jun 5, 2019
Regular Expression Denial of Service in highcharts
Moderate
GHSA-m45f-4828-5cv5
was published
for
highcharts
(npm)
Aug 19, 2020
•
withdrawn
Memory Exposure in concat-stream
Moderate
GHSA-g74r-ffvr-5q9f
was published
for
concat-stream
(npm)
Jun 3, 2019
Regular Expression Denial of Service in underscore.string
Moderate
GHSA-v2p6-4mp7-3r9v
was published
for
underscore.string
(npm)
Jun 14, 2019
ProTip!
Advisories are also available from the
GraphQL API