Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Moderate Security Advisories
Loading...
Moderate
Ecosystems: pypi
Packages: pywbem
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1naDJjLTZtMzgtYzc4as4AAdH4
PyWBEM TOCTOU vulnerability in certificate validationEcosystems: pypi
Packages: pywbem
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1tN3hqLWNjcWMtcDRnMs25Vg
Apache Tomcat Directory Traversal vulnerabilityEcosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: pywbem
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1mOXE1LTQ2cWctNzR4NM4AAdHq
PyWBEM TOCTOU vulnerability in certificate validationEcosystems: pypi
Packages: pywbem
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1xcmo0LXJtcWctNGhjcM2skg
Apache Tomcat Does Not Properly Handle Empty RequestsEcosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.nifi:nifi
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1xajdmLWo2aDktZzVycc4AAYQI
XML External Entity Reference in Apache NiFiEcosystems: maven
Packages: org.apache.nifi:nifi
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo5NnIteHZqcS1yOXBn
activesupport vulnerable to Denial of Service via large XML document depthEcosystems: rubygems
Packages: activesupport
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: pypi
Packages: oauth2
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS00NDMzLTRjeHEtdnY3M84AAdH5
SimpleGeo python-oauth2 does not check the nonce allowing replay attacksEcosystems: pypi
Packages: oauth2
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: apache-airflow
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 month ago
GSA_kwCzR0hTQS0yNTIyLW1yamMtbTY4OM4AA7Kq
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config usedEcosystems: pypi
Packages: apache-airflow
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 month ago
Moderate
Ecosystems: rubygems
Packages: sentry-raven
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM5YzUtOWZwci1tODgy
sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific numberEcosystems: rubygems
Packages: sentry-raven
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: pypi
Packages: roundup
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS01djZxLXhxcTgtZzR4as4AAZ8S
Roundup Cross-site Scripting (XSS) vulnerabilityEcosystems: pypi
Packages: roundup
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: rubygems
Packages: sprockets
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMzcHAtMzc2My1tcmZw
sprockets vulnerable to Path TraversalEcosystems: rubygems
Packages: sprockets
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: packagist
Packages: zendframework/zendservice-api, zendframework/zendservice-amazon, zendframework/zendservice-windowsazure, zendframework/zendservice-technorati, zendframework/zendservice-slideshare, zendframework/zendservice-nirvanix, zendframework/zendservice-audioscrobbler, zendframework/zendrest, zendframework/zendopenid, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS01d20yLTM4cTUtNXJ4ds4AATUI
Several Zend Products Vulnerable to XXE and XEE attacksEcosystems: packagist
Packages: zendframework/zendservice-api, zendframework/zendservice-amazon, zendframework/zendservice-windowsazure, zendframework/zendservice-technorati, zendframework/zendservice-slideshare, zendframework/zendservice-nirvanix, zendframework/zendservice-audioscrobbler, zendframework/zendrest, zendframework/zendopenid, zendframework/zendframework1
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: pyshop
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1mNTk0LWYzdjMtZzY0Oc4AAfCB
pyshop vulnerable to man-in-the-middle attacks due to using HTTP to retrieve packages from the PyPI repositoryEcosystems: pypi
Packages: pyshop
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: npm
Packages: ejs
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 20 days ago
GSA_kwCzR0hTQS1naHI1LWNoM3AtdmNyNs4AA7Xa
ejs lacks certain pollution protectionEcosystems: npm
Packages: ejs
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 20 days ago
Moderate
Ecosystems: cargo
Packages: deno
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS01ZnJ3LTRyd3EteGhjcs4AA5zP
Deno's improper suffix match testing for DENO_AUTH_TOKENSEcosystems: cargo
Packages: deno
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: maven
Packages: org.mortbay.jetty:jetty
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1xbWdqLTVoNzUtanI2N82FRA
Jetty Directory Traversal VulnerabilityEcosystems: maven
Packages: org.mortbay.jetty:jetty
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: packagist
Packages: moodle/moodle
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 months ago
GSA_kwCzR0hTQS1mNm1oLTc5dmgtMmh2N84AA6Os
Cross-site Scripting in Moodle ChatEcosystems: packagist
Packages: moodle/moodle
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 months ago
Moderate
Ecosystems: pypi
Packages: moin
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS00NTJoLXJ4MjgtNDl3Oc4AAfXk
MoinMoin Cross-site scripting (XSS) vulnerabilityEcosystems: pypi
Packages: moin
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: Mezzanine
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 3 months ago
GSA_kwCzR0hTQS1xcDU2LTgydnAteHFnds4AA5l8
Mezzanine allows attackers to bypass access control mechanismsEcosystems: pypi
Packages: Mezzanine
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 3 months ago
Moderate
Ecosystems: cargo
Packages: apollo-router
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS1jZ3FmLTNjcTUtd3Zjas4AA5zT
Apollo Router's Compressed Payloads do not respect HTTP Payload LimitsEcosystems: cargo
Packages: apollo-router
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: packagist
Packages: october/system, october/october
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 4 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY3M3ctcjl4Zy03Y3I5
Use of insecure jQuery version in OctoberCMSEcosystems: packagist
Packages: october/system, october/october
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 4 years ago
Moderate
Ecosystems: pypi
Packages: transifex-client
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1qZjk5LTJyajQtanhybc4AAelR
Transifex command-line client has improper certificate validationEcosystems: pypi
Packages: transifex-client
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: go
Packages: github.com/cloudevents/sdk-go/v2
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS01cGY2LTJxd3gtcHhtMs4AA5zw
Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentialsEcosystems: go
Packages: github.com/cloudevents/sdk-go/v2
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: maven
Packages: org.apache.activemq:activemq-client
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS05Y3ZyLTh4cTQtMm03M84AATvL
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQEcosystems: maven
Packages: org.apache.activemq:activemq-client
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.glassfish:javax.faces
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1xMzg4LWo3Y3ctZmY3d84AAcSt
Path Traversal in Eclipse MojarraEcosystems: maven
Packages: org.glassfish:javax.faces
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: cargo
Packages: ascii
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
GSA_kwCzR0hTQS1tcnJ3LWdyaHEtODZnZs4AAx3Z
Ascii (crate) allows out-of-bounds array indexing in safe codeEcosystems: cargo
Packages: ascii
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
Ecosystems: pypi
Packages: beaker
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS0zOXZtLXA5bXItNHIyN84AAff8
Beaker Sensitive Information Disclosure vulnerabilityEcosystems: pypi
Packages: beaker
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: Elixir
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS12ZmNnLTVnZ2MtM3J4eM4AAfkB
Elixir can leak information due to weak use of cryptoEcosystems: pypi
Packages: Elixir
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: go
Packages: github.com/cloudflare/cfrpki
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS1wbXc5LTU2N3AtNjhwY84AAvmZ
OctoRPKI crashes when max iterations is reachedEcosystems: go
Packages: github.com/cloudflare/cfrpki
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
Ecosystems: cargo
Packages: borsh
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
GSA_kwCzR0hTQS1mang1LXFwZjQteGpmMs4AAy0U
Parsing borsh messages with ZST which are not-copy/clone is unsoundEcosystems: cargo
Packages: borsh
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
Ecosystems: maven
Packages: org.elasticsearch:elasticsearch
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS04Njk5LW04NTUtY3dxZs4AAWFu
Cross-site scripting in ElasticsearchEcosystems: maven
Packages: org.elasticsearch:elasticsearch
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.opencms:opencms-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1jNXZ3LTM0MmgteDVyeM2Jmw
Alkacon OpenCms Exposes JSP Source CodeEcosystems: maven
Packages: org.opencms:opencms-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
GSA_kwCzR0hTQS02Y3h2LTI3cjItZnAzbc4AA2RX
Zenario CMS Cross-site Scripting vulnerabilityEcosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
Moderate
Ecosystems: go
Packages: helm.sh/helm/v3
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 3 months ago
GSA_kwCzR0hTQS1qdzQ0LTRmM2otcTM5Ns4AA5uc
Helm shows secrets in clear textEcosystems: go
Packages: helm.sh/helm/v3
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 3 months ago
Moderate
Ecosystems: pypi
Packages: Django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS01aDJxLTRocnAtdjlycs4AAfPc
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory BufferEcosystems: pypi
Packages: Django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: go, pypi
Packages: github.com/microcosm-cc/bluemonday, pybluemonday
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS14OTVoLTk3OXgtY2Yzas0Wmg
Policies not properly enforced in bluemondayEcosystems: go, pypi
Packages: github.com/microcosm-cc/bluemonday, pybluemonday
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1qaGpnLXcyY3AtNWo0NM4AAce9
Django DoS in django.views.static.serveEcosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: npm
Packages: electron-markdownify
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS1xcWhmLXhmaHctNzg4NM4AAvtB
Markdownify has Files or Directories Accessible to External PartiesEcosystems: npm
Packages: electron-markdownify
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
Ecosystems: maven
Packages: org.opensearch.plugin:opensearch-security
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
GSA_kwCzR0hTQS03MnEyLWd3d2YtNmhyds4AA2gb
OpenSearch Issue with tenant read-only permissionsEcosystems: maven
Packages: org.opensearch.plugin:opensearch-security
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
Moderate
Ecosystems: cargo
Packages: num-bigint
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS12OTM1LXBxbXItZzh2Oc0W1w
Unexpected panics in num-bigintEcosystems: cargo
Packages: num-bigint
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.myfaces.core:myfaces-impl, org.apache.myfaces.shared:myfaces-shared-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS00ZnY0LWNxNXYteDQ1bc4AAgFT
Improper Authentication in Apache MyFacesEcosystems: maven
Packages: org.apache.myfaces.core:myfaces-impl, org.apache.myfaces.shared:myfaces-shared-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.archiva:archiva-common
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 3 months ago
GSA_kwCzR0hTQS1ocDJ4LTZ2cm0tN2o3ds4AA5sA
Apache Archiva Reflected Cross-site Scripting vulnerabilityEcosystems: maven
Packages: org.apache.archiva:archiva-common
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 3 months ago
Moderate
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4
actionpack Path Traversal vulnerabilityEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: npm
Packages: xo-server, xo-web
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
GSA_kwCzR0hTQS1ncnZtLWdjcWYtZ2g4cc4AApGy
Xen Orchestra Mishandles AuthorizationEcosystems: npm
Packages: xo-server, xo-web
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS14bWY0LWozajcteGo3cc1kWA
Apache Tomcat DoS Via Requests Including Null CharactersEcosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: cargo
Packages: coreos-installer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS04NjJnLTloNW0tbTNxds0W6A
coreos-installer < 0.10.0 writes world-readable Ignition config to installed systemEcosystems: cargo
Packages: coreos-installer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: rubygems
Packages: actionpack, rails
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz
Rails vulnerable to Cross-site ScriptingEcosystems: rubygems
Packages: actionpack, rails
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: npm
Packages: readthedocs
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS05OHBmLWdmaDMteDNtcM4AAv0C
Read the Docs vulnerable to Cross-Site Scripting (XSS)Ecosystems: npm
Packages: readthedocs
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
Ecosystems: maven
Packages: org.apache.nifi:nifi
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4cHAtNzV2ci0yMnZx
Improper Restriction of Rendered UI Layers or Frames in Apache nififEcosystems: maven
Packages: org.apache.nifi:nifi
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
Moderate
Ecosystems: maven
Packages: org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat:tomcat-websocket
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS12NjgyLTh2djgtdnB3cs4AA5-j
Denial of Service via incomplete cleanup vulnerability in Apache TomcatEcosystems: maven
Packages: org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat:tomcat-websocket
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: packagist
Packages: flarum/tags
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMyd3gtNGd4eC1oNDhm
Users can edit the tags of any discussionEcosystems: packagist
Packages: flarum/tags
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
Moderate
Ecosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS04NmZwLWpnd20td2dqNc1mcQ
Apache Tomcat XSS VulnerabilityEcosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.apache.wicket:wicket
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 months ago
GSA_kwCzR0hTQS04dnZwLTUyNWgtY3hmOc4AA6Hm
Cross-Site Request Forgery in Apache WicketEcosystems: maven
Packages: org.apache.wicket:wicket
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 months ago
Moderate
Ecosystems: go
Packages: github.com/jackc/pgx/v4, github.com/jackc/pgx
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS1tN3dyLTJ4ZjctY205cM4AA5v_
pgx SQL Injection via Line Comment CreationEcosystems: go
Packages: github.com/jackc/pgx/v4, github.com/jackc/pgx
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: maven
Packages: org.mortbay.jetty:jetty
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS05NjZyLTk2MmctMmpxNc2qSg
Mortbay Jetty CRLF Injection VulnerabilityEcosystems: maven
Packages: org.mortbay.jetty:jetty
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: py-mini-racer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3Y2ctN3hxdy1xY3h3
Heap Overflow in PyMiniRacerEcosystems: pypi
Packages: py-mini-racer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
Moderate
Ecosystems: go
Packages: google.golang.org/protobuf/internal/encoding/json, google.golang.org/protobuf/encoding/protojson, google.golang.org/protobuf
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS04cjNmLTg0NGMtbWMzN84AA5yO
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONEcosystems: go
Packages: google.golang.org/protobuf/internal/encoding/json, google.golang.org/protobuf/encoding/protojson, google.golang.org/protobuf
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: go
Packages: github.com/google/exposure-notifications-verification-server
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS13eDhxLXJnZnItY2Y2ds0XGw
Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-serverEcosystems: go
Packages: github.com/google/exposure-notifications-verification-server
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: maven
Packages: org.jboss.resteasy:resteasy-jaxrs
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1wYzU0LXBjaG0teGN3Ns4AAdza
XML External Entity Reference in RESTEasyEcosystems: maven
Packages: org.jboss.resteasy:resteasy-jaxrs
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: apache-airflow-providers-ftp
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 27 days ago
GSA_kwCzR0hTQS0zZ2c4LW1jODctY3EzaM4AA7OB
Improper Certificate Validation vulnerability in Apache Airflow FTP ProviderEcosystems: pypi
Packages: apache-airflow-providers-ftp
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 27 days ago
Moderate
Ecosystems: npm
Packages: handlebars
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY1MmctNmpoeC01ODZw
Denial of Service in handlebarsEcosystems: npm
Packages: handlebars
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
Moderate
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1
actionpack Cross-site Scripting vulnerabilityEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: pypi
Packages: inventree
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
GSA_kwCzR0hTQS03cnE0LXFjcHctNzRncc4AArtK
Formula Injection in Exported DataEcosystems: pypi
Packages: inventree
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
Ecosystems: maven
Packages: io.vertx:vertx-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZjdzgtN2o2Yy1oY2Nw
Moderate severity vulnerability that affects io.vertx:vertx-coreEcosystems: maven
Packages: io.vertx:vertx-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
Moderate
Ecosystems: npm
Packages: s3-url-parser
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 17 days ago
GSA_kwCzR0hTQS1yNHE5LXh4NWctajI0cM4AA7es
s3-url-parser vulnerable to Denial of Service via regexes componentEcosystems: npm
Packages: s3-url-parser
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 17 days ago
Moderate
Ecosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS1yOXh4LTRjbXYtODU2eM4AAv6f
Cross-site Scripting in ZenarioEcosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
Ecosystems: npm
Packages: vditor
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 15 days ago
GSA_kwCzR0hTQS1tNWpmLThjcm0tcjY1bc4AA7ve
Vditor allows Cross-site Scripting via an attribute of an `A` elementEcosystems: npm
Packages: vditor
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 15 days ago
Moderate
Ecosystems: pypi
Packages: Plone
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS13cHJyLW1jNTQtYzYycc4AAeNO
Exposure of Sensitive Information in PloneEcosystems: pypi
Packages: Plone
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: npm
Packages: cofeescript
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02d2gtbThtOC02eHg1
cofeescript is malwareEcosystems: npm
Packages: cofeescript
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 6 years ago
Moderate
Ecosystems: pypi
Packages: oncall
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmdzIteDlmOC0yZjZt
Cross-Site ScriptingEcosystems: pypi
Packages: oncall
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 3 years ago
Moderate
Ecosystems: rubygems
Packages: passenger
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlxajctanZnNC1xcjJ4
Phusion Passenger Denial of ServiceEcosystems: rubygems
Packages: passenger
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: npm
Packages: m-server
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdteHYteGYycS02ajht
Cross-Site Scripting in m-serverEcosystems: npm
Packages: m-server
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
Moderate
Ecosystems: pypi
Packages: roundup
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1qNTlqLWgzZzctY3BtZs2z1Q
Roundup xml-rpc server improper check of property permissionsEcosystems: pypi
Packages: roundup
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: packagist
Packages: snipe/snipe-it
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS05dndmLTU0bTktZ2M0Zs0aug
snipe-it is vulnerable to Improper Access ControlEcosystems: packagist
Packages: snipe/snipe-it
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
Ecosystems: pypi
Packages: moin
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS04NzZjLXFtY2YtY3h2Ns3UmQ
MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is setEcosystems: pypi
Packages: moin
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: npm
Packages: wizard-syncronizer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdndzMtZ2Y0cC02Mnhj
Command Injection in wizard-syncronizerEcosystems: npm
Packages: wizard-syncronizer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
Moderate
Ecosystems: pypi
Packages: ryu
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 13 days ago
GSA_kwCzR0hTQS1mZnA5LXBmcTktZzJ3d84AA7wV
Ryu Infinite Loop vulnerabilityEcosystems: pypi
Packages: ryu
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 13 days ago
Moderate
Ecosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 14 days ago
GSA_kwCzR0hTQS1ocjJyLXc2d2MtMjVwds4AA7wE
Zenario uses Twig filters insecurely in the Twig Snippet pluginEcosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 14 days ago
Moderate
Ecosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 14 days ago
GSA_kwCzR0hTQS03cXdqLWdjamYtODI4Zs4AA7wF
Zenario's Tree Explorer tool from Organizer affected by Cross-site ScriptingEcosystems: packagist
Packages: tribalsystems/zenario
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 14 days ago
Moderate
Ecosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy
actionpack Cross-site Scripting vulnerabilityEcosystems: rubygems
Packages: actionpack
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: npm
Packages: cross-env.js
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh3aHEtM2hyai12NnY1
cross-env.js is malwareEcosystems: npm
Packages: cross-env.js
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
Moderate
Ecosystems: npm
Packages: easyquick
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThoNTUtNDlqbS03Mzl4
Directory Traversal in easyquickEcosystems: npm
Packages: easyquick
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 5 years ago
Moderate
Ecosystems: pypi
Packages: nebari
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 12 days ago
GSA_kwCzR0hTQS12amM0LTN2Z3gtcHE5aM4AA7wx
Nebari prints temporary Keycloak root passwordEcosystems: pypi
Packages: nebari
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 12 days ago
Moderate
Ecosystems: pypi
Packages: whoogle-search
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS1waGc2LTQ0bTctaHgzaM4AA6AX
Whoogle Search Cross-site Scripting vulnerabilityEcosystems: pypi
Packages: whoogle-search
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: pypi
Packages: kiwitcms
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS1oZjk0LThteDUtMnZ2as4AAv-5
Cross-site Scripting in kiwitcmsEcosystems: pypi
Packages: kiwitcms
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
Ecosystems: pypi
Packages: Django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS03ZnE4LTRwdjUtNXc1Y84AAVA8
Django cross-site scripting (XSS) attack via user-supplied redirect URLsEcosystems: pypi
Packages: Django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: cargo
Packages: rmp-serde
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
GSA_kwCzR0hTQS0yNTVyLTNwcngtbWY5Oc4AAyPL
`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8Ecosystems: cargo
Packages: rmp-serde
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
Ecosystems: pypi
Packages: whoogle-search
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS1oaDJxLXF2NjYtamNxZ84AA6AZ
Whoogle Search Path Traversal vulnerabilityEcosystems: pypi
Packages: whoogle-search
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdwcHAtNXhjNS13ZnB4
Active Record allows bypassing of database-query restrictionsEcosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: npm
Packages: @vrite/sdk
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
GSA_kwCzR0hTQS00NGZmLTl3NGYtOTl3Ns4AA2bn
Improper Input Validation in vriteio/vriteEcosystems: npm
Packages: @vrite/sdk
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
Moderate
Ecosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNjcnItOXZtZy04NjR2
Active Record Improper Input ValidationEcosystems: rubygems
Packages: activerecord
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 6 years ago
Moderate
Ecosystems: npm
Packages: node-krb5
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR2OXEtaG0ycC02OGM0
Spoofing attack due to unvalidated KDC in node-krb5Ecosystems: npm
Packages: node-krb5
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 3 years ago
Moderate
Ecosystems: packagist
Packages: feehi/feehicms
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
GSA_kwCzR0hTQS1janA4LXZ2MzgtcDNnMs4AAv4_
Cross-Site Request Forgery in feehi/feehicmsEcosystems: packagist
Packages: feehi/feehicms
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
Ecosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1jd3c0LXZqNXItcng1N82pTQ
Exposure of Sensitive Information in Apache TomcatEcosystems: maven
Packages: org.apache.tomcat:tomcat
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: maven
Packages: org.jboss.ironjacamar:ironjacamar-jdbc
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1wcGcyLXd3M3ctaHE4NM4AAfX1
User confusion in IronJacamarEcosystems: maven
Packages: org.jboss.ironjacamar:ironjacamar-jdbc
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: go
Packages: github.com/answerdev/answer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
GSA_kwCzR0hTQS12eGhyLXAydnAtN2dmOM4AAx9y
Answer vulnerable to Cross-site ScriptingEcosystems: go
Packages: github.com/answerdev/answer
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS0yOTZ3LTZxaHEtZ2Y5Ms4AAU-L
Django denial of service via file upload namingEcosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Moderate
Ecosystems: pypi
Packages: Pydio
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
GSA_kwCzR0hTQS01Z2hnLTIzM2gtN2o3Oc4AAg3Z
PyDio Stored XSS VulnerabilityEcosystems: pypi
Packages: Pydio
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
Ecosystems: cargo
Packages: Deno
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
GSA_kwCzR0hTQS0zajI3LTU2M3YtMjh3Zs4AA5zR
*const c_void / ExternalPointer unsoundness leading to use-after-freeEcosystems: cargo
Packages: Deno
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 2 months ago
Moderate
Ecosystems: maven
Packages: org.apache.openmeetings:openmeetings-parent
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
GSA_kwCzR0hTQS1weGo5LW13OTYtcTYzNM4AAbLg
Apache OpenMeetings Cross-site Scripting vulnerabilityEcosystems: maven
Packages: org.apache.openmeetings:openmeetings-parent
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Statistics
Advisories: 18,774
Packages: 8,381
Repositories: 2,494
Ecosystems: 12
Packages: 8,381
Repositories: 2,494
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
moodle/moodle
247
tensorflow
207
tensorflow-cpu
191
tensorflow-gpu
190
org.jenkins-ci.main:jenkins-core
114
magento/community-edition
106
org.apache.tomcat:tomcat
92
pimcore/pimcore
86
typo3/cms
66
microweber/microweber
62
django
54
typo3/cms-core
54
dolibarr/dolibarr
53
apache-airflow
52
phpmyadmin/phpmyadmin
50
drupal/core
46
thorsten/phpmyfaq
45
github.com/usememos/memos
42
actionpack
42
apache-superset
40
drupal/drupal
38
plone
35
concrete5/concrete5
34
showdoc/showdoc
34
github.com/grafana/grafana
33
Plone
32
librenms/librenms
32
ansible
31
nova
31
org.keycloak:keycloak-core
31
github.com/mattermost/mattermost-server/v6
30
moin
27
github.com/mattermost/mattermost/server/v8
27
intelliants/subrion
27
symfony/symfony
27
craftcms/cms
26
silverstripe/framework
25
com.liferay.portal:release.portal.bom
25
snipe/snipe-it
24
org.elasticsearch:elasticsearch
24
baserproject/basercms
22
github.com/answerdev/answer
21
org.apache.struts:struts2-core
20
k8s.io/kubernetes
20
grumpydictator/firefly-iii
19
shopware/platform
18
shopware/shopware
18
rdiffweb
18
froxlor/froxlor
18
matrix-synapse
18
remdex/livehelperchat
18
mediawiki/core
18
nilsteampassnet/teampass
18
getkirby/cms
17
keystone
17
org.apache.tomcat.embed:tomcat-embed-core
16
prestashop/prestashop
15
github.com/argoproj/argo-cd/v2
15
vyper
15
tribalsystems/zenario
14
puppet
14
Django
14
salt
14
glance
14
nokogiri
14
yetiforce/yetiforce-crm
14
mautic/core
13
org.keycloak:keycloak-services
13
forkcms/forkcms
13
org.xwiki.platform:xwiki-platform-oldcore
13
github.com/docker/docker
13
io.undertow:undertow-core
13
Pillow
13
com.jfinal:jfinal
13
shopware/core
13
tinymce
12
github.com/goharbor/harbor
12
org.apache.solr:solr-core
12
github.com/hashicorp/consul
12
org.apache.jspwiki:jspwiki-main
12
com.thoughtworks.xstream:xstream
12
neutron
12
github.com/hashicorp/vault
12
github.com/hashicorp/nomad
11
lavalite/cms
11
DotNetNuke.Core
11
pyftpdlib
11
feehi/feehicms
11
github.com/cilium/cilium
11
genix/cms
11
org.bouncycastle:bcprov-jdk14
11
getgrav/grav
11
github.com/argoproj/argo-cd
11
directus
11
org.keycloak:keycloak-parent
11
@openzeppelin/contracts
10
org.eclipse.jetty:jetty-server
10
notebook
10
github.com/ethereum/go-ethereum
10
ec-cube/ec-cube
10
rack
10
org.springframework.security:spring-security-core
10
github.com/greenpau/caddy-security
10
org.bouncycastle:bcprov-jdk15on
10
fat_free_crm
10
github.com/mattermost/mattermost-server
10
@openzeppelin/contracts-upgradeable
10
contao/core-bundle
10
org.apache.jspwiki:jspwiki-war
10
org.apache.nifi:nifi
10
wallabag/wallabag
10
francoisjacquet/rosariosis
10
com.vaadin:vaadin-bom
10
typo3/cms-backend
10
activesupport
10
joplin
10
github.com/containerd/containerd
10
org.springframework:spring-core
10
PaddlePaddle
10
helm.sh/helm/v3
10
swagger-ui
9
roundup
9
TinyMCE
9
org.igniterealtime.openfire:parent
9
org.mortbay.jetty:jetty
9
cakephp/cakephp
9
org.jenkins-ci.plugins:git
9
org.opencrx:opencrx-core-models
9
ghost
9
zendframework/zendframework1
9
gogs.io/gogs
9
angular
9
bolt/bolt
9
publify_core
9
rubygems-update
9
org.jenkins-ci.plugins:script-security
9
horizon
9
ckeditor4
9
tinymce/tinymce
9
code.gitea.io/gitea
9
github.com/openfga/openfga
8
org.apache.activemq:activemq-client
8
wasmtime
8
org.apache.archiva:archiva
8
electron
8
simplesamlphp/simplesamlphp
8
rails-html-sanitizer
8
jquery-rails
8
github.com/kubeedge/kubeedge
8
opencv-python
8
bootstrap
8
org.opencms:opencms-core
8
laravel/framework
8
org.jenkins-ci.plugins:electricflow
8
editor.md
8
rails
8
sylius/sylius
8
contao/contao
8
silverstripe/cms
8
centreon/centreon
8
opencv-contrib-python
8
Microsoft.ChakraCore
8
impresscms/impresscms
8
actionview
8
io.jenkins:configuration-as-code
7
github.com/moby/moby
7
modoboa
7
com.vaadin:flow-server
7
pyload-ng
7
silverstripe/admin
7
trytond
7
phpbb/phpbb
7
admidio/admidio
7
aiohttp
7
validator
7
org.apache.cxf:cxf-core
7
org.opennms:opennms
7
kevinpapst/kimai2
7
io.jenkins.blueocean:blueocean
7
pillow
7
wagtail
7
org.apache.santuario:xmlsec
7
org.bouncycastle:bcprov-jdk15
7
jquery-ui
7
jquery-ui-rails
7
org.bouncycastle:bcprov-jdk15to18
7
org.webjars.npm:jquery-ui
7
jQuery.UI.Combined
7
github.com/google/fscrypt
7
org.owasp.antisamy:antisamy
7
org.jenkins-ci.plugins:subversion
7
phpmyfaq/phpmyfaq
7
activerecord
7
next
7
org.jenkins-ci.plugins:email-ext
7
OctoPrint
7
org.apache.james:james-server
7
github.com/1Panel-dev/1Panel
7
swift
7
vantage6
7
Filter by Repository
https://github.com/tensorflow/tensorflow
207
https://github.com/moodle/moodle
164
https://github.com/jenkinsci/jenkins
90
https://github.com/pimcore/pimcore
83
https://github.com/microweber/microweber
58
https://github.com/django/django
57
https://github.com/apache/tomcat
53
https://github.com/apache/airflow
51
https://github.com/thorsten/phpmyfaq
45
https://github.com/usememos/memos
42
https://github.com/xwiki/xwiki-platform
38
https://github.com/TYPO3/typo3
35
https://github.com/kubernetes/kubernetes
33
https://github.com/rails/rails
33
https://github.com/star7th/showdoc
32
https://github.com/librenms/librenms
30
https://github.com/plone/Products.CMFPlone
29
https://github.com/grafana/grafana
29
https://github.com/keycloak/keycloak
27
https://github.com/ansible/ansible
26
https://github.com/phpmyadmin/phpmyadmin
22
https://github.com/symfony/symfony
22
https://github.com/spring-projects/spring-framework
21
https://github.com/craftcms/cms
21
https://github.com/answerdev/answer
21
https://github.com/openstack/nova
21
https://github.com/Dolibarr/dolibarr
21
https://github.com/snipe/snipe-it
20
https://github.com/apache/activemq
19
https://github.com/argoproj/argo-cd
19
https://github.com/concretecms/concretecms
19
https://github.com/firefly-iii/firefly-iii
19
https://github.com/ikus060/rdiffweb
18
https://github.com/python-pillow/Pillow
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/matrix-org/synapse
17
https://github.com/shopware/platform
17
https://github.com/apache/struts
17
https://github.com/magento/magento2
16
https://github.com/shopware/shopware
16
https://github.com/vyperlang/vyper
15
https://github.com/openstack/keystone
15
https://github.com/CVEProject/cvelist
15
https://github.com/PaddlePaddle/Paddle
14
https://github.com/froxlor/froxlor
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/OpenNMS/opennms
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/go-gitea/gitea
13
https://github.com/octobercms/october
13
https://github.com/getkirby/kirby
13
https://github.com/x-stream/xstream
13
https://github.com/mautic/mautic
13
https://github.com/goharbor/harbor
12
https://github.com/netty/netty
12
https://github.com/PrestaShop/PrestaShop
12
https://github.com/tinymce/tinymce
12
https://github.com/apache/cxf
12
https://github.com/contao/contao
11
https://github.com/intelliants/subrion
11
https://github.com/forkcms/forkcms
11
https://github.com/silverstripe/silverstripe-framework
11
https://github.com/cilium/cilium
11
https://github.com/saltstack/salt
10
https://github.com/laurent22/joplin
10
https://github.com/ethereum/go-ethereum
10
https://github.com/moby/moby
10
https://github.com/liufee/cms
10
https://github.com/baserproject/basercms
10
https://github.com/nilsteampassnet/TeamPass
10
https://github.com/OpenZeppelin/openzeppelin-contracts
10
https://github.com/vaadin/platform
10
https://github.com/helm/helm
10
https://github.com/greenpau/caddy-security
10
https://github.com/containerd/containerd
10
https://github.com/mattermost/mattermost
10
https://github.com/directus/directus
10
https://github.com/github/advisory-database
9
https://github.com/strapi/strapi
9
https://github.com/electron/electron
9
https://github.com/geoserver/geoserver
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/apache/nifi
9
https://github.com/publify/publify
9
https://github.com/jquery/jquery
9
https://github.com/puppetlabs/puppet
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/getgrav/grav
8
https://github.com/pandao/editor.md
8
https://github.com/LavaLite/cms
8
https://github.com/openfga/openfga
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/eclipse/jetty.project
8
https://github.com/ckeditor/ckeditor4
8
https://github.com/bcgit/bc-java
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/TryGhost/Ghost
8
https://github.com/openstack/glance
8
https://github.com/hashicorp/consul
8
https://github.com/rack/rack
8
https://github.com/rubygems/rubygems
8
https://github.com/bytecodealliance/wasmtime
8
https://github.com/wallabag/wallabag
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/kubeedge/kubeedge
8
https://github.com/jupyter/notebook
8
https://github.com/twbs/bootstrap
7
https://github.com/aio-libs/aiohttp
7
https://github.com/vaadin/flow
7
https://github.com/pyload/pyload
7
https://github.com/nahsra/antisamy
7
https://github.com/opencv/opencv
7
https://github.com/dolibarr/dolibarr
7
https://github.com/hashicorp/vault
7
https://github.com/laravel/framework
7
https://github.com/traefik/traefik
7
https://github.com/wagtail/wagtail
7
https://github.com/scrapy/scrapy
7
https://github.com/apache/zeppelin
7
https://github.com/dotnet/runtime
7
https://github.com/openstack/horizon
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/vantage6/vantage6
7
https://github.com/thorsten/phpMyFAQ
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/modoboa/modoboa
7
https://github.com/google/fscrypt
7
https://github.com/1Panel-dev/1Panel
7
https://github.com/gogs/gogs
7
https://github.com/kevinpapst/kimai2
7
https://github.com/giampaolo/pyftpdlib
7
https://github.com/cui2shark/security
6
https://github.com/parse-community/parse-server
6
https://github.com/opensearch-project/security
6
https://github.com/neorazorx/facturascripts
6
https://github.com/ipython/ipython
6
https://github.com/cloudflare/cfrpki
6
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/pimcore/customer-data-framework
6
https://github.com/jenkinsci/config-file-provider-plugin
6
https://github.com/opencast/opencast
6
https://github.com/panva/jose
6
https://github.com/igniterealtime/Openfire
6
https://github.com/croogo/croogo
6
https://github.com/backstage/backstage
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/jquery/jquery-ui
6
https://github.com/urllib3/urllib3
6
https://github.com/dompdf/dompdf
6
https://github.com/containers/podman
6
https://github.com/d4wner/Vulnerabilities-Report
6
https://github.com/umbraco/Umbraco-CMS
6
https://github.com/pimcore/admin-ui-classic-bundle
6
https://github.com/onionshare/onionshare
6
https://github.com/cubefs/cubefs
6
https://github.com/faucetsdn/ryu
6
https://github.com/simplesamlphp/simplesamlphp
6
https://github.com/oroinc/orocommerce
6
https://github.com/jenkinsci/script-security-plugin
6
https://github.com/Sylius/Sylius
6
https://github.com/nocodb/nocodb
6
https://github.com/OctoPrint/OctoPrint
5
https://github.com/cosmos/cosmos-sdk
5
https://github.com/cri-o/cri-o
5
https://github.com/rancher/rancher
5
https://github.com/sulu/sulu
5
https://github.com/opencontainers/runc
5
https://github.com/pmmp/PocketMine-MP
5
https://github.com/cloudfoundry/uaa
5
https://github.com/hashicorp/nomad
5
https://github.com/lief-project/LIEF
5
https://github.com/admidio/admidio
5
https://github.com/unshiftio/url-parse
5
https://github.com/hyperium/hyper
5
https://github.com/puma/puma
5
https://github.com/apache/superset
5
https://github.com/mantisbt/mantisbt
5
https://github.com/etcd-io/etcd
5
https://github.com/paritytech/frontier
5
https://github.com/gradio-app/gradio
5
https://github.com/nervosnetwork/ckb
5
https://github.com/cakephp/cakephp
5
https://github.com/evershopcommerce/evershop
5
https://github.com/NodeBB/NodeBB
5
https://github.com/TribalSystems/Zenario
5
https://github.com/kivikakk/comrak
5
https://github.com/jenkinsci/codedx-plugin
5
https://github.com/alextselegidis/easyappointments
5
https://github.com/apache/tika
5
https://bitbucket.org/snakeyaml/snakeyaml
5
https://github.com/bolt/bolt
5
https://github.com/zitadel/zitadel
5
https://github.com/jenkinsci/subversion-plugin
5
https://github.com/lxml/lxml
5
https://github.com/xuxueli/xxl-job
5
https://github.com/yiisoft/yii2
5
https://github.com/apache/dolphinscheduler
5