Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,958
Erlang
29
GitHub Actions
16
Go
1,745
Maven
4,971
npm
3,507
NuGet
609
pip
3,066
Pub
10
RubyGems
832
Rust
780
Swift
34
Unreviewed advisories
All unreviewed
5,000+

133 advisories

Prototype Pollution in swiper Critical
CVE-2021-23370 was published for swiper (npm) May 10, 2021
TypeORM vulnerable to MAID and Prototype Pollution Critical
CVE-2020-8158 was published for typeorm (npm) May 7, 2021
Prototype Pollution in safe-object2 Critical
CVE-2020-7726 was published for safe-object2 (npm) May 6, 2021
Prototype Pollution in worksmith Critical
CVE-2020-7725 was published for worksmith (npm) May 6, 2021
Prototype Pollution in nodee-utils Critical
CVE-2020-7722 was published for nodee-utils (npm) May 6, 2021
Prototype Pollution in gammautils Critical
CVE-2020-7718 was published for gammautils (npm) May 6, 2021
Prototype Pollution in promisehelpers Critical
CVE-2020-7723 was published for promisehelpers (npm) May 6, 2021
Prototype Pollution in gedi Critical
CVE-2020-7727 was published for gedi (npm) May 6, 2021
Prototype Pollution in node-oojs Critical
CVE-2020-7721 was published for node-oojs (npm) May 6, 2021
Prototype Pollution in locutus Critical
CVE-2020-7719 was published for locutus (npm) May 6, 2021
Prototype Pollution in confucious Critical
CVE-2020-7714 was published for confucious (npm) May 6, 2021
Prototype Pollution in dot-notes Critical
CVE-2020-7717 was published for dot-notes (npm) May 6, 2021
Prototype Pollution in deeps Critical
CVE-2020-7716 was published for deeps (npm) May 6, 2021
Prototype Pollution in arr-flatten-unflatten Critical
CVE-2020-7713 was published for arr-flatten-unflatten (npm) May 6, 2021
Prototype Pollution in property-expr Critical
CVE-2020-7707 was published for property-expr (npm) May 6, 2021
Prototype Pollution in connie-lang Critical
CVE-2020-7706 was published for connie-lang (npm) May 6, 2021
Prototype Pollution in irrelon-path and @irrelon/path Critical
CVE-2020-7708 was published for @irrelon/path (npm) May 6, 2021
Prototype Pollution in templ8 Critical
CVE-2020-7702 was published for templ8 (npm) May 6, 2021
Prototype Pollution in nis-utils Critical
CVE-2020-7703 was published for nis-utils (npm) May 6, 2021
Prototype Pollution in madlib-object-utils Critical
CVE-2020-7701 was published for madlib-object-utils (npm) May 6, 2021
Prototype Pollution in phpjs Critical
CVE-2020-7700 was published for phpjs (npm) May 6, 2021
Prototype pollution in set-object-value Critical
CVE-2020-28281 was published for set-object-value (npm) Apr 13, 2021
Prototype Pollution in multi-ini Critical
CVE-2020-28448 was published for multi-ini (npm) Apr 13, 2021
Prototype Pollution in set-or-get Critical
CVE-2021-25913 was published for set-or-get (npm) Apr 12, 2021
Prototype Pollution Vulnerability in object-collider Critical
CVE-2021-25914 was published for object-collider (npm) Mar 19, 2021
ProTip! Advisories are also available from the GraphQL API