GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,939
Maven
5,000+
npm
3,677
NuGet
643
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
228 advisories
Filter by severity
Magento 2 Community Edition Information Disclosure
Moderate
CVE-2019-7929
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Information Disclosure
Moderate
CVE-2019-7888
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition Path Disclosure
Moderate
CVE-2019-7852
was published
for
magento/community-edition
(Composer)
May 24, 2022
Wikimedia information leak vulnerability
High
CVE-2019-12474
was published
for
mediawiki/core
(Composer)
May 24, 2022
Exposure of Sensitive Information in moodle
Moderate
CVE-2022-30598
was published
for
moodle/moodle
(Composer)
May 19, 2022
DCE extension for Typo3 Discloses Environment Information
Moderate
CVE-2014-8328
was published
for
t3/dce
(Composer)
May 17, 2022
DOMPDF Information Disclosure
Moderate
CVE-2014-5011
was published
for
dompdf/dompdf
(Composer)
May 17, 2022
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
Moderate
CVE-2011-3712
was published
for
cakephp/cakephp
(Composer)
May 17, 2022
Zend Framework XXE Vulnerability
Moderate
CVE-2012-5657
was published
for
zendframework/zendframework1
(Composer)
May 17, 2022
Typo3 Information Disclosure
Moderate
CVE-2014-3946
was published
for
typo3/cms
(Composer)
May 17, 2022
Drupal sensitive information disclosure
Moderate
CVE-2016-3170
was published
for
drupal/core
(Composer)
May 17, 2022
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
Moderate
CVE-2013-7073
was published
for
typo3/cms
(Composer)
May 17, 2022
Drupal Views can allow unauthorized users to see Statistics information
Moderate
CVE-2016-6212
was published
for
drupal/core
(Composer)
May 17, 2022
phpMyAdmin ReCaptcha bypass
Moderate
CVE-2015-6830
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
Drupal sensitive information disclosure
Moderate
CVE-2016-9449
was published
for
drupal/core
(Composer)
May 17, 2022
Moodle Glossary search displays entries without checking user permissions to view them
Moderate
CVE-2016-5012
was published
for
moodle/moodle
(Composer)
May 17, 2022
phpMyAdmin Local file exposure through symlinks with UploadDir
Moderate
CVE-2016-6613
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
phpMyAdmin Local file exposure
Moderate
CVE-2016-6612
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
phpMyAdmin allows to detect if user is logged in
Moderate
CVE-2016-6625
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
phpMyAdmin path disclosure
Moderate
CVE-2016-9853
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
Moodle Global search displays user names for unauthenticated users
Moderate
CVE-2017-2643
was published
for
moodle/moodle
(Composer)
May 17, 2022
Moodle User fullname disclosure on user preferences page
Moderate
CVE-2017-2642
was published
for
moodle/moodle
(Composer)
May 17, 2022
TYPO3 Sensitive Information Disclosure via escapeStrForLike method
Moderate
CVE-2010-5104
was published
for
typo3/cms-core
(Composer)
May 17, 2022
phpMyAdmin vulnerable to XML external entity (XXE) injection attack
Moderate
CVE-2011-4107
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 17, 2022
Typo3 Backend Configuration XSS Vulnerability
Low
CVE-2012-3529
was published
for
typo3/cms
(Composer)
May 17, 2022
ProTip!
Advisories are also available from the
GraphQL API