GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,956
Erlang
29
GitHub Actions
16
Go
1,740
Maven
4,967
npm
3,507
NuGet
609
pip
3,064
Pub
10
RubyGems
832
Rust
780
Swift
34
Unreviewed advisories
All unreviewed
5,000+
3,956 advisories
Filter by severity
Typo3 Information Disclosure in Backend User Interface
Moderate
GHSA-q9c4-9v5m-597p
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Typo3 Information Disclosure in User Authentication
Moderate
GHSA-m96r-7vqm-j95g
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting in TYPO3 CMS Backend
Moderate
GHSA-v4qr-8h2v-qpjx
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting in TYPO3 CMS
Moderate
GHSA-5gr6-97fv-52cc
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Insecure Unserialize in TYPO3 Backend
Moderate
GHSA-c7rj-92xr-wprg
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cache Flooding in TYPO3 Frontend
Moderate
GHSA-pw2q-qwvj-gh43
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Authentication Bypass in TYPO3 Frontend
Moderate
GHSA-mh3r-6cp5-hc2j
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Authentication Bypass in TYPO3 CMS
Moderate
GHSA-6f9m-v7mp-7jjq
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Information Disclosure in TYPO3 CMS
Moderate
GHSA-g46h-v2cc-6c94
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
High
GHSA-ppgf-8745-8pgx
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Information Disclosure in TYPO3 CMS
Low
GHSA-c7p6-3c9c-f88q
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Privilege Escalation & SQL Injection in TYPO3 CMS
High
GHSA-7qwg-fcpw-xg5g
was published
for
typo3/cms
(Composer)
Jun 5, 2024
TYPO3 Remote Code Execution in third party library swiftmailer
High
GHSA-g4pf-3jvq-2gcw
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Arbitrary Code Execution in TYPO3 CMS
Critical
GHSA-67wg-6j7r-mqh8
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Insecure Deserialization in TYPO3 CMS
High
GHSA-8h28-f46f-m87h
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting (XSS) vulnerability in typolinks
Moderate
GHSA-p5c5-gmj4-g48f
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting (XSS) in TYPO3 Backend
Moderate
GHSA-hq37-rfjc-mr8h
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting in third party library mso/idna-convert
Moderate
GHSA-qmwf-j7g7-f5jw
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Information Disclosure in TYPO3 Backend
Moderate
GHSA-vpr3-rc99-2wpr
was published
for
typo3/cms
(Composer)
Jun 5, 2024
SQL Injection in TYPO3 Frontend Login
Moderate
GHSA-j86x-pjmr-9m6w
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Missing Access Check in TYPO3 CMS
Critical
GHSA-gwfx-p7mr-f92v
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Insecure Unserialize in TYPO3 Import/Export
Moderate
GHSA-xvcp-33rc-j8gq
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting in TYPO3 Backend
Moderate
GHSA-86r8-4g3w-7xjp
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Privilege Escalation in TYPO3 CMS
Moderate
GHSA-v5jp-4h2p-j2p4
was published
for
typo3/cms
(Composer)
Jun 5, 2024
Cross-Site Scripting in TYPO3 Backend
Moderate
GHSA-5wx6-xwxf-q8qj
was published
for
typo3/cms
(Composer)
Jun 5, 2024
ProTip!
Advisories are also available from the
GraphQL API