Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,988
Maven
5,000+
npm
3,704
NuGet
661
pip
3,332
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+

11 advisories

Loading
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library... Moderate Unreviewed
CVE-2021-45477 was published Mar 2, 2023
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library... Moderate Unreviewed
CVE-2021-45478 was published Mar 2, 2023
Resque vulnerable to reflected XSS in Queue Endpoint Moderate
CVE-2023-50727 was published for resque (RubyGems) Dec 18, 2023
priya-hinduja PatrickTulskie
The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles... Moderate Unreviewed
CVE-2023-28898 was published Jan 12, 2024
Resque vulnerable to reflected XSS in resque-web failed and queues lists Moderate
CVE-2023-50725 was published for resque (RubyGems) Dec 18, 2023
madslundholmdk
Resque vulnerable to Reflected Cross Site Scripting through pathnames Moderate
CVE-2023-50724 was published for resque (RubyGems) Dec 18, 2023
brianvans 0977732077
Improper Handling of Parameters in moodle Moderate
CVE-2024-25979 was published for moodle/moodle (Composer) Feb 19, 2024
A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software... Moderate Unreviewed
CVE-2024-20306 was published Mar 27, 2024
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a... Moderate Unreviewed
CVE-2024-33433 was published May 14, 2024
ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response,... Moderate Unreviewed
CVE-2023-40819 was published Aug 6, 2024
Eclipse Glassfish improperly handles http parameters Moderate
CVE-2024-9329 was published for org.glassfish.main.admin:rest-service (Maven) Sep 30, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database