Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,295
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,107
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+

261 advisories

Loading
Improper Neutralization of Formula Elements in a CSV File vulnerability in Nakashima Masahiro WP... High Unreviewed
CVE-2022-38702 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site... Critical Unreviewed
CVE-2022-46801 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya... High Unreviewed
CVE-2022-41616 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress... Critical Unreviewed
CVE-2022-45370 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter... Critical Unreviewed
CVE-2022-45360 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Jackmail & Sarbacane... High Unreviewed
CVE-2022-46821 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist –... High Unreviewed
CVE-2023-41798 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech... High Unreviewed
CVE-2022-46804 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram... Critical Unreviewed
CVE-2022-45810 was published Nov 7, 2023
Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML... Moderate Unreviewed
CVE-2023-43071 was published Oct 5, 2023
SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results"... Critical Unreviewed
CVE-2020-10131 was published Sep 6, 2023
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote... High Unreviewed
CVE-2023-22877 was published Aug 28, 2023
An issue in Atlos v.1.0 allows an authenticated attacker to execute arbitrary code via a crafted... High Unreviewed
CVE-2023-38843 was published Aug 17, 2023
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File vulnerability High
CVE-2023-4006 was published for thorsten/phpmyfaq (Composer) Jul 31, 2023
Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File High Unreviewed
CVE-2023-37219 was published Jul 30, 2023
An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website... High Unreviewed
CVE-2022-28864 was published Jul 24, 2023
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web... Moderate Unreviewed
CVE-2023-3527 was published Jul 19, 2023
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection... High Unreviewed
CVE-2023-28958 was published Jul 10, 2023
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling... High Unreviewed
CVE-2023-3493 was published Jul 1, 2023
Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the... Moderate Unreviewed
CVE-2022-46408 was published Jun 29, 2023
Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability High
CVE-2023-3302 was published for admidio/admidio (Composer) Jun 23, 2023
Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection. High Unreviewed
CVE-2023-31867 was published Jun 22, 2023
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in... High Unreviewed
CVE-2023-0721 was published Jun 9, 2023
Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to... High Unreviewed
CVE-2023-33410 was published Jun 5, 2023
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection High
CVE-2023-2629 was published for pimcore/customer-management-framework-bundle (Composer) May 11, 2023
sampritdas8 Credited to sampritdas8
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database