GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,249
Erlang
31
GitHub Actions
21
Go
2,018
Maven
5,000+
npm
3,723
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
857
Swift
36
Unreviewed advisories
All unreviewed
5,000+
20 advisories
Filter by severity
Symfony vulnerable to command execution hijack on Windows with Process class
High
CVE-2024-51736
was published
for
symfony/process
(Composer)
Nov 6, 2024
Composer has a command injection via malicious git branch name
High
CVE-2024-35241
was published
for
composer/composer
(Composer)
Jun 10, 2024
Composer has multiple command injections via malicious git/hg branch names
High
CVE-2024-35242
was published
for
composer/composer
(Composer)
Jun 10, 2024
TYPO3 Install Tool vulnerable to Code Execution
High
CVE-2024-22188
was published
for
typo3/cms-core
(Composer)
Feb 13, 2024
RaspAP Command Injection vulnerability
High
CVE-2022-39987
was published
for
billz/raspap-webgui
(Composer)
Aug 1, 2023
RaspAP raspap-webgui Command Injection vulnerability
High
CVE-2023-30260
was published
for
billz/raspap-webgui
(Composer)
Jun 23, 2023
WWBN AVideo command injection vulnerability
High
CVE-2023-32073
was published
for
wwbn/avideo
(Composer)
May 12, 2023
DataFlow upload remote code execution vulnerability
High
CVE-2021-41231
was published
for
openmage/magento-lts
(Composer)
Jan 27, 2023
Fix for authenticated remote code execution through layout update
High
CVE-2021-41144
was published
for
openmage/magento-lts
(Composer)
Jan 27, 2023
Fix for arbitrary file deletion in customer media allows for remote code execution
High
CVE-2021-41143
was published
for
openmage/magento-lts
(Composer)
Jan 27, 2023
Fix for arbitrary command execution in custom layout update through blocks
High
CVE-2021-39217
was published
for
openmage/magento-lts
(Composer)
Jan 27, 2023
Froxlor vulnerable to Command Injection
High
CVE-2023-0315
was published
for
froxlor/froxlor
(Composer)
Jan 16, 2023
Drupal Core Arbitrary PHP code execution vulnerability
High
CVE-2020-13664
was published
for
drupal/core
(Composer)
May 24, 2022
Dolibarr authenticated Remote Code Execution
High
CVE-2020-35136
was published
for
dolibarr/dolibarr
(Composer)
May 24, 2022
phpMyAdmin PHP code injection
High
CVE-2016-6609
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 14, 2022
Centreon Command Injection
High
CVE-2015-1561
was published
for
centreon/centreon
(Composer)
May 14, 2022
Command injection in czproject/git-php
High
CVE-2022-25866
was published
for
czproject/git-php
(Composer)
Apr 26, 2022
Improper escaping of command arguments on Windows leading to command injection
High
CVE-2021-41116
was published
for
composer/composer
(Composer)
Oct 5, 2021
Command Injection in RaspAP 2.6.6
High
CVE-2021-38556
was published
for
billz/raspap-webgui
(Composer)
Sep 2, 2021
Command injection in mail agent settings
High
CVE-2021-37708
was published
for
shopware/core
(Composer)
Aug 30, 2021
ProTip!
Advisories are also available from the
GraphQL API