Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

12 advisories

Loading
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed High
GHSA-f8fg-pg57-v4j8 was published for league/commonmark (Composer) Sep 1, 2026
StarPlatinu Credited to StarPlatinu
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes Moderate
CVE-2026-71478 was published for league/commonmark (Composer) Aug 6, 2026
TungNGo02 Credited to TungNGo02
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This... Low Unreviewed
CVE-2025-66606 was published Feb 9, 2026
A vulnerability in the web-based management interface of Cisco Common Services Platform Collector... Moderate Unreviewed
CVE-2025-20168 was published Jan 8, 2025
A vulnerability in the web-based management interface of Cisco Common Services Platform Collector... Moderate Unreviewed
CVE-2025-20166 was published Jan 8, 2025
A vulnerability in the web-based management interface of Cisco Common Services Platform Collector... Moderate Unreviewed
CVE-2025-20167 was published Jan 8, 2025
A malicious website could have included an iframe with an malformed URI resulting in a non... Moderate Unreviewed
CVE-2024-10941 was published Nov 6, 2024
Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards... High Unreviewed
CVE-2023-38522 was published Jul 26, 2024
Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31... High Unreviewed
CVE-2024-21864 was published May 16, 2024
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability Critical
CVE-2023-37908 was published for org.xwiki.rendering:xwiki-rendering-xml (Maven) Oct 25, 2023
Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5... Moderate Unreviewed
CVE-2023-22840 was published Aug 11, 2023
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml Critical
CVE-2023-31126 was published for org.xwiki.commons:xwiki-commons-xml (Maven) May 9, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database