Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,057
Maven
5,000+
npm
3,742
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+

2,811 advisories

Loading
Directory Traversal in yjmyjmyjm High
GHSA-g376-whg7-896m was published for yjmyjmyjm (npm) Sep 1, 2020
Directory Traversal in scott-blanch-weather-app High
CVE-2017-16184 was published for scott-blanch-weather-app (npm) Sep 1, 2020
Directory Traversal in iter-server High
CVE-2017-16183 was published for iter-server (npm) Sep 1, 2020
Directory Traversal in serve46 High
CVE-2017-16148 was published for serve46 (npm) Sep 1, 2020
Directory Traversal in wintiwebdev High
CVE-2017-16181 was published for wintiwebdev (npm) Sep 1, 2020
Directory Traversal in chatbyvista High
CVE-2017-16177 was published for chatbyvista (npm) Sep 1, 2020
Directory Traversal in jansenstuffpleasework High
CVE-2017-16176 was published for jansenstuffpleasework (npm) Sep 1, 2020
Directory Traversal in section2.madisonjbrooks12 High
CVE-2017-16172 was published for section2.madisonjbrooks12 (npm) Sep 1, 2020
Directory Traversal in @vivaxy/here High
GHSA-m4vv-p6fq-jhqp was published for @vivaxy/here (npm) Sep 1, 2020
Path Traversal in 626 High
CVE-2018-3727 was published for 626 (npm) Sep 1, 2020
Path Traversal in express-cart High
GHSA-8h8v-6qqm-fwpq was published for express-cart (npm) Sep 1, 2020
Path Traversal in bruteser High
GHSA-v7cp-5326-54fh was published for bruteser (npm) Sep 3, 2020
Path Traversal in ponse High
GHSA-wfhx-6pcm-7m55 was published for ponse (npm) Sep 3, 2020
Path Traversal in file-static-server High
GHSA-qjfh-xc44-rm9x was published for file-static-server (npm) Sep 3, 2020
Path Traversal in zero High
GHSA-crf7-fvjx-863q was published for zero (npm) Sep 3, 2020
Path Traversal in restify-swagger-jsdoc High
GHSA-gvff-25cc-4f66 was published for restify-swagger-jsdoc (npm) Sep 3, 2020
Path Traversal in serve High
GHSA-48gc-5j93-5cfq was published for serve (npm) Sep 11, 2020
Arbitrary File Read in phantom-html-to-pdf High
CVE-2020-7763 was published for phantom-html-to-pdf (npm) Nov 6, 2020
MoinMoin vulnerable to remote code execution via cache action High
CVE-2020-25074 was published for moin (pip) Nov 11, 2020
Local File Inclusion by unauthenticated users High
CVE-2020-15246 was published for october/cms (Composer) Nov 23, 2020
ka1n4t
Directory Traversal in spring-boot-actuator-logview High
CVE-2021-21234 was published for eu.hinsch:spring-boot-actuator-logview (Maven) Jan 5, 2021
st0rmi
Path Traversal in Apache Flink High
CVE-2020-17519 was published for org.apache.flink:flink-runtime_2.11 (Maven) Jan 6, 2021
stephanmiehe
Path Traversal in the Java Kubernetes Client High
CVE-2020-8570 was published for io.kubernetes:client-java (Maven) Jan 29, 2021
Path traversal in Node-RED-Dashboard High
CVE-2021-3223 was published for node-red-dashboard (npm) Jan 29, 2021
Path traversal in bolt/core High
CVE-2021-27367 was published for bolt/core (Composer) Feb 18, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database