An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Moderate
20 days ago

Liferay Portal's System, Instance and Site Settings are vulnerable to Open Redirect GSA_kwCzR0hTQS1tNTVyLTlmeDgtNzI1as4ABMCE

maven com.liferay:com.liferay.site.admin.web, com.liferay:com.liferay.configuration.admin.web
Moderate
20 days ago

Liferay Portal's selection modal is vulnerable to XSS GSA_kwCzR0hTQS1nOGZoLXBmdzMtOHJtcs4ABMBy

maven com.liferay:com.liferay.users.admin.web
Moderate
21 days ago

Liferay Portal API Allows Authenticated Users to Access Workflow Definitions by Name GSA_kwCzR0hTQS13cjhtLTVoMnAtNDQzMs4ABMAD

maven com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl
Moderate
22 days ago

Liferay Portal is vulnerable to Reflected XSS attack through get_editor path GSA_kwCzR0hTQS1qaGdyLWo5Y2otOGo2Ms4ABL8c

maven com.liferay:com.liferay.frontend.editor.ckeditor.web
Moderate
22 days ago

Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting GSA_kwCzR0hTQS02Nng2LThqZ3YtcXBmaM4ABL8I

maven com.liferay:com.liferay.portal.workflow.task.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.portal.bom
Moderate
23 days ago

Liferay Portal exposes ERC which can lead to exploit the time response attack GSA_kwCzR0hTQS05cDd4LThjNTctNHBxds4ABL5n

maven com.liferay:com.liferay.portal.workflow.api, com.liferay:com.liferay.headless.admin.workflow.impl, com.liferay:com.liferay.portal.vulcan.impl
Moderate
23 days ago

Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting GSA_kwCzR0hTQS1yY2M3LWp4N3AtaHJ2NM4ABL2G

maven com.liferay:com.liferay.portal.workflow.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.portal.bom
Moderate
23 days ago

TYPO3 CSV download feature information disclosure GSA_kwCzR0hTQS1qOHZtLTdxNTItMm0ybc4ABL1l

packagist typo3/cms-recordlist, typo3/cms-backend
Moderate
23 days ago

TYPO3 backend modules have Broken Access Control GSA_kwCzR0hTQS0yZmh3LTJqN20tbXI0bc4ABL1p

packagist typo3/cms-dashboard, typo3/cms-recycler, typo3/cms-workspaces
Moderate
24 days ago

Liferay Portal exposes 500 status when attempting login with a deleted client secret GSA_kwCzR0hTQS05dndxLWo2Z3Etdzl4aM4ABL1W

maven com.liferay:com.liferay.portal.security.sso.openid.connect.impl
Moderate
24 days ago

Apache Jackrabbit: Core and JCR Commons are vulnerable to Deserialization of Untrusted Data GSA_kwCzR0hTQS1jeHZjLWc4ZjItNGdtbc4ABLzH

maven org.apache.jackrabbit:jackrabbit-jcr-commons, org.apache.jackrabbit:jackrabbit-core
Moderate
27 days ago

FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side GSA_kwCzR0hTQS1ycncyLXB4OWotcWZmas4ABLxL

maven co.fs2:fs2-io_2.13.0-M5, co.fs2:fs2-io_2.12.0-RC2, co.fs2:fs2-io_2.12.0-M5, co.fs2:fs2-io_2.12.0-RC1, co.fs2:fs2-io_2.12.0-M4, co.fs2:fs2-io_2.11, co.fs2:fs2-io_0.27, co.fs2:fs2-io_0.26, co.fs2:fs2-io_3, co.fs2:fs2-io_2.13, co.fs2:fs2-io_2.12
Moderate
29 days ago

Netty's decoders vulnerable to DoS via zip bomb style attack GSA_kwCzR0hTQS0zcDhtLWo4NXEtcGdtas4ABLos

maven io.netty:netty-codec, io.netty:netty-codec-compression
Moderate
about 1 month ago

Silverpeas Core Username Enumeration Vulnerability GSA_kwCzR0hTQS1jdjJtLTVwZnAtZjI0Nc4ABLmA

maven org.silverpeas.core:silverpeas-core
Moderate
about 1 month ago

Liferay Portal allows improper access through the expandoTableLocalService GSA_kwCzR0hTQS04NzZnLTQ5cjYtMzNxas4ABLkx

maven com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl
Moderate
about 1 month ago

Payload's SQLite adapter Session Fixation vulnerability GSA_kwCzR0hTQS0yNnJ2LWgyaGYtM2Z3NM4ABLjK

npm @payloadcms/graphql, @payloadcms/next, payload
Moderate
about 1 month ago

Payload does not invalidate JWTs after log out GSA_kwCzR0hTQS01djY2LW0yMzctaHdmN84ABLjM

npm @payloadcms/graphql, @payloadcms/next, payload
Moderate
about 1 month ago

XWiki PDF export jobs store sensitive cookies unencrypted in job statuses GSA_kwCzR0hTQS05bTdjLW0zM2YtMzQyOc4ABLfw

maven org.xwiki.platform:xwiki-platform-export-pdf-api
Moderate
about 1 month ago

Contao can disclose sensitive information in the news module GSA_kwCzR0hTQS13NTNtLWd4dmctdng3cM4ABLfu

packagist contao/contao, contao/core-bundle
Moderate
about 1 month ago

Contao applies improper access control in the back end voters GSA_kwCzR0hTQS03bTQ3LXI3NXItY3g4ds4ABLfs

packagist contao/contao, contao/core-bundle
Moderate
about 1 month ago

GraphQL Armor Max-Depth Plugin Bypass via fragment caching GSA_kwCzR0hTQS0yMjRwLXY2OGctNWc4Zs4ABLcf

npm @escape.tech/graphql-armor-max-depth

Filter by Severity

Filter by Ecosystem

Filter by Package

moodle/moodle 305 tensorflow 200 tensorflow-cpu 191 tensorflow-gpu 189 magento/community-edition 150 org.jenkins-ci.main:jenkins-core 148 typo3/cms 120 com.liferay.portal:release.portal.bom 104 org.apache.tomcat:tomcat 95 pimcore/pimcore 87 github.com/mattermost/mattermost/server/v8 83 com.liferay.portal:release.dxp.bom 80 typo3/cms-core 74 microweber/microweber 72 silverstripe/framework 68 phpmyadmin/phpmyadmin 56 dolibarr/dolibarr 55 drupal/core 54 github.com/usememos/memos 50 magento/project-community-edition 47 thorsten/phpmyfaq 47 concrete5/concrete5 46 apache-superset 45 apache-airflow 44 actionpack 44 librenms/librenms 43 Django 42 drupal/drupal 38 picklescan 34 Plone 34 showdoc/showdoc 34 mantisbt/mantisbt 33 org.elasticsearch:elasticsearch 33 org.keycloak:keycloak-core 32 craftcms/cms 31 github.com/grafana/grafana 31 github.com/mattermost/mattermost-server/v6 30 github.com/mattermost/mattermost-server 29 nova 29 moin 27 mautic/core 27 intelliants/subrion 27 snipe/snipe-it 27 baserproject/basercms 26 k8s.io/kubernetes 25 ansible 25 symfony/symfony 24 shopware/platform 23 directus 23 github.com/answerdev/answer 21 org.keycloak:keycloak-services 21 nilsteampassnet/teampass 21 github.com/hashicorp/vault 21 gradio 20 froxlor/froxlor 20 mediawiki/core 20 grumpydictator/firefly-iii 20 org.apache.struts:struts2-core 20 matrix-synapse 19 plone 19 shopware/shopware 19 github.com/cilium/cilium 19 remdex/livehelperchat 18 github.com/docker/docker 18 DotNetNuke.Core 17 shopware/core 17 getkirby/cms 17 salt 17 github.com/argoproj/argo-cd/v2 17 zendframework/zendframework1 16 django 16 prestashop/prestashop 16 rdiffweb 16 yetiforce/yetiforce-crm 15 rack 15 contao/core-bundle 15 vyper 15 github.com/hashicorp/nomad 15 org.opencms:opencms-core 15 io.undertow:undertow-core 15 org.apache.jspwiki:jspwiki-main 15 org.xwiki.platform:xwiki-platform-oldcore 14 tinymce 14 glance 14 github.com/hashicorp/consul 14 org.apache.tomcat.embed:tomcat-embed-core 14 puppet 14 com.thoughtworks.xstream:xstream 13 github.com/goharbor/harbor 13 github.com/openfga/openfga 13 com.jfinal:jfinal 13 forkcms/forkcms 13 org.springframework.security:spring-security-core 13 nokogiri 13 tribalsystems/zenario 13 keystone 13 roundup 12 helm.sh/helm/v3 12 transformers 12 wallabag/wallabag 12 simplesamlphp/simplesamlphp 12 typo3/cms-backend 12 next 12 @openzeppelin/contracts-upgradeable 11 github.com/containerd/containerd 11 lavalite/cms 11 @openzeppelin/contracts 11 org.eclipse.jetty:jetty-server 11 activesupport 11 github.com/argoproj/argo-cd 11 genix/cms 11 contao/contao 11 feehi/feehicms 11 ghost 11 TinyMCE 11 getgrav/grav 11 tinymce/tinymce 11 org.bouncycastle:bcprov-jdk15on 11 ec-cube/ec-cube 11 laravel/framework 11 github.com/ethereum/go-ethereum 11 github.com/traefik/traefik/v2 11 bolt/bolt 10 joplin 10 org.apache.jspwiki:jspwiki-war 10 org.apache.nifi:nifi 10 org.springframework:spring-core 10 OctoPrint 10 surrealdb 10 aiohttp 10 com.vaadin:vaadin-bom 10 electron 10 notebook 10 fat_free_crm 10 vllm 10 francoisjacquet/rosariosis 10 vite 10 zendframework/zendframework 10 org.apache.solr:solr-core 10 org.keycloak:keycloak-parent 10 PaddlePaddle 10 com.liferay.portal:com.liferay.portal.impl 10 opencart/opencart 10 ckeditor4 10 github.com/greenpau/caddy-security 10 pyftpdlib 9 org.jenkins-ci.plugins:git 9 angular 9 rubygems-update 9 code.gitea.io/gitea 9 open-webui 9 org.apache.activemq:activemq-client 9 cakephp/cakephp 9 wasmtime 9 org.mortbay.jetty:jetty 9 gogs.io/gogs 9 pimcore/admin-ui-classic-bundle 9 github.com/rancher/rancher 9 org.opencrx:opencrx-core-models 9 silverstripe/cms 9 phpoffice/phpspreadsheet 9 calibreweb 9 publify_core 9 horizon 9 org.igniterealtime.openfire:parent 9 sylius/sylius 9 org.jenkins-ci.plugins:script-security 9 swagger-ui 9 urllib3 9 opencv-python 8 neutron 8 Microsoft.ChakraCore 8 mlflow 8 centreon/centreon 8 camaleon_cms 8 org.jenkins-ci.plugins:subversion 8 org.apache.ranger:ranger 8 parse-server 8 github.com/cri-o/cri-o 8 github.com/mattermost/mattermost-plugin-confluence 8 sulu/sulu 8 github.com/traefik/traefik/v3 8 org.opensearch.plugin:opensearch-security 8 org.apache.tomcat:tomcat-coyote 8 onionshare-cli 8 modoboa 8 org.apache.archiva:archiva 8 github.com/kubeedge/kubeedge 8 org.jenkins-ci.plugins:electricflow 8 org.webjars:bootstrap 8 phpmyfaq/phpmyfaq 8 editor.md 8 phpbb/phpbb 8 activerecord 8 rails-html-sanitizer 8 alextselegidis/easyappointments 8 pyload-ng 8 opencv-contrib-python 8 impresscms/impresscms 8 org.jenkins-ci.plugins:email-ext 7

Filter by Repository

https://github.com/tensorflow/tensorflow 200 https://github.com/moodle/moodle 186 https://github.com/liferay/liferay-portal 115 https://github.com/jenkinsci/jenkins 109 https://github.com/pimcore/pimcore 85 https://github.com/TYPO3/typo3 64 https://github.com/microweber/microweber 63 https://github.com/apache/tomcat 62 https://github.com/xwiki/xwiki-platform 50 https://github.com/silverstripe/silverstripe-framework 50 https://github.com/django/django 50 https://github.com/usememos/memos 50 https://github.com/rails/rails 46 https://github.com/thorsten/phpmyfaq 45 https://github.com/apache/airflow 43 https://github.com/keycloak/keycloak 42 https://github.com/kubernetes/kubernetes 40 https://github.com/librenms/librenms 40 https://github.com/mmaitre314/picklescan 34 https://github.com/star7th/showdoc 32 https://github.com/mantisbt/mantisbt 32 https://github.com/concretecms/concretecms 28 https://github.com/symfony/symfony 27 https://github.com/grafana/grafana 27 https://github.com/mautic/mautic 27 https://github.com/phpmyadmin/phpmyadmin 26 https://github.com/craftcms/cms 26 https://github.com/spring-projects/spring-framework 26 https://github.com/ansible/ansible 26 https://github.com/directus/directus 24 https://github.com/argoproj/argo-cd 24 https://github.com/mattermost/mattermost 24 https://github.com/umbraco/Umbraco-CMS 23 https://github.com/Dolibarr/dolibarr 22 https://github.com/answerdev/answer 21 https://github.com/shopware/shopware 21 https://github.com/apache/activemq 20 https://github.com/firefly-iii/firefly-iii 20 https://github.com/snipe/snipe-it 20 https://github.com/plone/Products.CMFPlone 20 https://github.com/magento/magento2 20 https://github.com/cilium/cilium 19 https://github.com/livehelperchat/livehelperchat 18 https://github.com/openstack/nova 18 https://github.com/contao/contao 18 https://github.com/apache/struts 17 https://github.com/shopware/platform 17 https://github.com/gradio-app/gradio 16 https://github.com/ikus060/rdiffweb 16 https://github.com/matrix-org/synapse 16 https://github.com/apache/cxf 15 https://github.com/vyperlang/vyper 15 https://github.com/getkirby/kirby 15 https://github.com/CVEProject/cvelist 15 https://github.com/netty/netty 15 https://github.com/geoserver/geoserver 14 https://github.com/OpenNMS/opennms 14 https://github.com/saltstack/salt 14 https://github.com/TYPO3/TYPO3.CMS 14 https://github.com/tinymce/tinymce 14 https://github.com/froxlor/froxlor 14 https://github.com/yetiforcecompany/yetiforcecrm 14 https://github.com/x-stream/xstream 14 https://github.com/moby/moby 14 https://github.com/baserproject/basercms 14 https://github.com/PaddlePaddle/Paddle 14 https://github.com/go-gitea/gitea 13 https://github.com/nilsteampassnet/TeamPass 13 https://github.com/goharbor/harbor 13 https://github.com/openfga/openfga 13 https://github.com/octobercms/october 13 https://github.com/PrestaShop/PrestaShop 13 https://github.com/apache/nifi 13 https://github.com/containerd/containerd 12 https://github.com/rack/rack 12 https://github.com/helm/helm 12 https://github.com/huggingface/transformers 12 https://github.com/TYPO3-CMS/core 12 https://github.com/bcgit/bc-java 12 https://github.com/traefik/traefik 12 https://github.com/ckeditor/ckeditor4 11 https://github.com/vaadin/platform 11 https://github.com/openstack/keystone 11 https://github.com/OpenZeppelin/openzeppelin-contracts 11 https://github.com/surrealdb/surrealdb 11 https://github.com/electron/electron 11 https://github.com/forkcms/forkcms 11 https://github.com/ethereum/go-ethereum 11 https://github.com/apache/zeppelin 11 https://github.com/laravel/framework 11 https://github.com/github/advisory-database 11 https://github.com/strapi/strapi 11 https://github.com/intelliants/subrion 11 https://github.com/wallabag/wallabag 10 https://github.com/backstage/backstage 10 https://github.com/simplesamlphp/simplesamlphp 10 https://github.com/greenpau/caddy-security 10 https://github.com/bytecodealliance/wasmtime 10 https://github.com/vercel/next.js 10 https://github.com/decidim/decidim 10 https://github.com/laurent22/joplin 10 https://github.com/aio-libs/aiohttp 10 https://github.com/TryGhost/Ghost 10 https://github.com/hashicorp/consul 10 https://github.com/PHPOffice/PhpSpreadsheet 10 https://github.com/vitejs/vite 10 https://github.com/liufee/cms 10 https://github.com/urllib3/urllib3 9 https://github.com/thorsten/phpMyFAQ 9 https://github.com/dnnsoftware/Dnn.Platform 9 https://github.com/vllm-project/vllm 9 https://github.com/rancher/rancher 9 https://github.com/alkacon/opencms-core 9 https://github.com/puppetlabs/puppet 9 https://github.com/pimcore/admin-ui-classic-bundle 9 https://github.com/publify/publify 9 https://github.com/fatfreecrm/fat_free_crm 9 https://github.com/jquery/jquery 9 https://github.com/jenkinsci/git-plugin 9 https://github.com/dpgaspar/Flask-AppBuilder 9 https://github.com/sparklemotion/nokogiri 8 https://github.com/rubygems/rubygems 8 https://github.com/dolibarr/dolibarr 8 https://github.com/pyload/pyload 8 https://github.com/sulu/sulu 8 https://github.com/dotnet/runtime 8 https://github.com/eclipse/jetty.project 8 https://github.com/swagger-api/swagger-ui 8 https://github.com/rails/rails-html-sanitizer 8 https://github.com/zendframework/zendframework 8 https://github.com/OctoPrint/OctoPrint 8 https://github.com/openstack/glance 8 https://github.com/hashicorp/nomad 8 https://github.com/nilsteampassnet/teampass 8 https://github.com/modoboa/modoboa 8 https://github.com/onionshare/onionshare 8 https://github.com/pandao/editor.md 8 https://github.com/gogs/gogs 8 https://github.com/LavaLite/cms 8 https://github.com/opencast/opencast 8 https://github.com/opensearch-project/security 8 https://github.com/kubeedge/kubeedge 8 https://github.com/apache/superset 8 https://github.com/denoland/deno 8 https://github.com/parse-community/parse-server 8 https://github.com/getgrav/grav 8 https://github.com/scrapy/scrapy 7 https://github.com/containers/podman 7 https://github.com/twbs/bootstrap 7 https://github.com/matrix-org/matrix-rust-sdk 7 https://github.com/google/fscrypt 7 https://github.com/undertow-io/undertow 7 https://github.com/MobSF/Mobile-Security-Framework-MobSF 7 https://github.com/croogo/croogo 7 https://github.com/modxcms/revolution 7 https://github.com/dragonflyoss/dragonfly 7 https://github.com/nocodb/nocodb 7 https://github.com/jupyter/notebook 7 https://github.com/kevinpapst/kimai2 7 https://github.com/zitadel/zitadel 7 https://github.com/python-pillow/Pillow 7 https://github.com/jeecgboot/jeecg-boot 7 https://github.com/OPCFoundation/UA-.NETStandard 7 https://github.com/Sylius/Sylius 7 https://github.com/n8n-io/n8n 7 https://github.com/Leantime/leantime 7 https://github.com/vega/vega 7 https://github.com/hashicorp/vault 7 https://github.com/igniterealtime/Openfire 7 https://github.com/nahsra/antisamy 7 https://github.com/openstack/horizon 7 https://github.com/janeczku/calibre-web 7 https://github.com/jenkinsci/blueocean-plugin 7 https://github.com/opencv/opencv 7 https://github.com/opencontainers/runc 7 https://github.com/chakra-core/ChakraCore 7 https://github.com/vaadin/flow 7 https://github.com/d4wner/Vulnerabilities-Report 6 https://github.com/pmmp/PocketMine-MP 6 https://github.com/louislam/uptime-kuma 6 https://github.com/ckan/ckan 6 https://github.com/zenml-io/zenml 6 https://github.com/jenkinsci/subversion-plugin 6 https://github.com/StarCitizenTools/mediawiki-skins-Citizen 6 https://github.com/FlowiseAI/Flowise 6 https://github.com/stacklok/minder 6 https://github.com/jenkinsci/fortify-on-demand-uploader-plugin 6 https://github.com/nodejs/undici 6 https://github.com/jenkinsci/configuration-as-code-plugin 6 https://github.com/drupal/core 6 https://github.com/1Panel-dev/1Panel 6 https://github.com/cui2shark/security 6 https://github.com/psf/requests 6 https://github.com/yiisoft/yii2 6 https://github.com/run-llama/llama_index 6 https://github.com/tecnickcom/TCPDF 6 https://github.com/giampaolo/pyftpdlib 6 https://github.com/matrix-org/matrix-js-sdk 6 https://github.com/wagtail/wagtail 6