Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+

28,286 advisories

Loading
Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute... Moderate Unreviewed
CVE-2020-24857 was published Mar 24, 2023
A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic.... Moderate Unreviewed
CVE-2023-1609 was published Mar 23, 2023
A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This... Moderate Unreviewed
CVE-2023-1613 was published Mar 23, 2023
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional Moderate
CVE-2023-28332 was published for moodle/moodle (Composer) Mar 23, 2023
Moodle vulnerable to Cross-site Scripting Moderate
CVE-2023-28331 was published for moodle/moodle (Composer) Mar 23, 2023
Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip Moderate
CVE-2023-1410 was published for github.com/grafana/grafana (Go) Mar 23, 2023
renniepak
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM... Moderate Unreviewed
CVE-2023-25992 was published Mar 23, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klaviyo, Inc. Klaviyo plugin <=... Moderate Unreviewed
CVE-2023-25456 was published Mar 23, 2023
Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35... Moderate Unreviewed
CVE-2023-22716 was published Mar 23, 2023
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext... Moderate Unreviewed
CVE-2023-22712 was published Mar 23, 2023
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code... Moderate Unreviewed
CVE-2023-23650 was published Mar 23, 2023
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi... Moderate Unreviewed
CVE-2023-22715 was published Mar 23, 2023
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple... Moderate Unreviewed
CVE-2023-23864 was published Mar 23, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso... Moderate Unreviewed
CVE-2022-47589 was published Mar 23, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product... Moderate Unreviewed
CVE-2023-23722 was published Mar 23, 2023
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin... Moderate Unreviewed
CVE-2023-23728 was published Mar 23, 2023
Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events... Moderate Unreviewed
CVE-2022-44742 was published Mar 23, 2023
A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic... Moderate Unreviewed
CVE-2023-1593 was published Mar 23, 2023
Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin <... Moderate Unreviewed
CVE-2022-45843 was published Mar 23, 2023
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager... Moderate Unreviewed
CVE-2023-28422 was published Mar 23, 2023
Reflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW... Moderate Unreviewed
CVE-2022-47431 was published Mar 23, 2023
Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8... Moderate Unreviewed
CVE-2023-22704 was published Mar 23, 2023
Duplicate Advisory: Grafana Stored Cross-site Scripting vulnerability Moderate
GHSA-3cgw-hfw7-wc7j was published for github.com/grafana/grafana (Go) Mar 23, 2023 • withdrawn
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2023-1051 was published Mar 23, 2023
Temenos T24 Release 20 was discovered to contain a reflected cross-site scripting (XSS)... Moderate Unreviewed
CVE-2023-24367 was published Mar 23, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database