Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,295
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,107
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+

39 advisories

Loading
An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-31049 was published Apr 14, 2026
bagisto has CSV Formula Injection in Create New Product Critical
CVE-2025-62417 was published for bagisto/bagisto (Composer) Oct 16, 2025
kiwi865 Credited to kiwi865
A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows... Critical Unreviewed
CVE-2025-56267 was published Sep 8, 2025
An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through... Critical Unreviewed
CVE-2024-47572 was published Jan 14, 2025
CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute... Critical Unreviewed
CVE-2024-29375 was published Apr 4, 2024
A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7... Critical Unreviewed
CVE-2023-47534 was published Mar 12, 2024
Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder |... Critical Unreviewed
CVE-2023-23796 was published Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue... Critical Unreviewed
CVE-2023-22719 was published Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product... Critical Unreviewed
CVE-2022-46802 was published Nov 13, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage... Critical Unreviewed
CVE-2022-45357 was published Nov 13, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX –... Critical Unreviewed
CVE-2022-46809 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter... Critical Unreviewed
CVE-2022-46803 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site... Critical Unreviewed
CVE-2022-46801 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress... Critical Unreviewed
CVE-2022-45370 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter... Critical Unreviewed
CVE-2022-45360 was published Nov 7, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram... Critical Unreviewed
CVE-2022-45810 was published Nov 7, 2023
SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results"... Critical Unreviewed
CVE-2020-10131 was published Sep 6, 2023
The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list... Critical Unreviewed
CVE-2022-3603 was published Nov 28, 2022
The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output... Critical Unreviewed
CVE-2022-3600 was published Nov 21, 2022
The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when... Critical Unreviewed
CVE-2022-3634 was published Nov 21, 2022
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the... Critical Unreviewed
CVE-2022-3574 was published Nov 14, 2022
CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress. Critical Unreviewed
CVE-2022-27858 was published Nov 9, 2022
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when... Critical Unreviewed
CVE-2022-3463 was published Nov 7, 2022
"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote... Critical Unreviewed
CVE-2022-22425 was published Nov 4, 2022
The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields... Critical Unreviewed
CVE-2022-3393 was published Oct 25, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database