Browse Security Advisories
Critical Security Advisories for org.apache.struts:struts2-core Clear Filters
Critical
about 5 years ago
Malicious Package in cordova-plugin-china-picker
npm
cordova-plugin-china-picker
Critical
about 5 years ago
Malicious Package in another-date-range-picker
npm
another-date-range-picker
Critical
about 5 years ago
Malicious Package in angular-material-sidenav-rnd
npm
angular-material-sidenav-rnd
Critical
about 5 years ago
Server secret was included in static assets and served to clients
npm
flood
Critical
about 5 years ago
Remote Code Execution in SyliusResourceBundle
packagist
sylius/resource-bundle
Critical
about 5 years ago
Code execution in Spring Integration
maven
org.springframework.integration:spring-integration-core
Critical
about 5 years ago
Operation on a Resource after Expiration or Release in Jetty Server
maven
org.eclipse.jetty:jetty-server
Critical
about 5 years ago
Potential Remote Code Execution in TYPO3 with mediace extension
packagist
friendsoftypo3/mediace
Critical
about 5 years ago
Command injection via Celery broker in Apache Airflow
pypi
apache-airflow
Critical
about 5 years ago
Insecure default config of Celery worker in Apache Airflow
pypi
apache-airflow
Critical
about 5 years ago
XXE attack in Mapfish Print
maven
org.mapfish.print:print-standalone, org.mapfish.print:print-servlet, org.mapfish.print:print-lib
Critical
over 5 years ago
XML external entity injection in Terracotta Quartz Scheduler
maven
org.quartz-scheduler:quartz
Critical
over 5 years ago
JHipster Kotlin using insecure source of randomness `RandomStringUtils` before v1.2.0
npm
generator-jhipster-kotlin
Critical
over 5 years ago
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
npm
jsrsasign
Critical
over 5 years ago
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
npm
jsrsasign
Critical
over 5 years ago
Improper Privilege Management in Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
Critical
over 5 years ago
Improper Input Validation in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 5 years ago
dom4j allows External Entities by default which might enable XXE attacks
maven
dom4j:dom4j, org.dom4j:dom4j
Critical
over 5 years ago
File system access via H2 in Apache Ignite
maven
org.apache.ignite:ignite-core
Critical
over 5 years ago
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
pypi
drf-jwt
Critical
over 5 years ago
Exposure of Sensitive Information to an Unauthorized Actor in AEgir
npm
aegir
Critical
over 5 years ago
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
rubygems
activesupport
Critical
over 5 years ago
Apache Camel Netty enables Java deserialization by default
maven
org.apache.camel:camel-netty
Critical
over 5 years ago
Remote code execution in Apache Commons Configuration
maven
org.apache.commons:commons-configuration2
Critical
over 5 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 5 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 5 years ago
Arbitrary file write in actionpack-page_caching gem
rubygems
actionpack-page_caching
Critical
over 5 years ago
False-negative validation results in MINT transactions with invalid baton
npm
slp-validate
Critical
over 5 years ago
False-negative validation results in MINT transactions with invalid baton
npm
slpjs
Critical
over 5 years ago
Potential Code Injection in Sprout Forms
packagist
barrelstrength/sprout-forms, barrelstrength/sprout-base-email
Critical
over 5 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 5 years ago
Negative charge in shopping cart in Shopizer
maven
com.shopizer:sm-core-model
Critical
over 5 years ago
Improper Neutralization of CRLF Sequences in HTTP Headers in Jooby ('HTTP Response Splitting)
maven
io.jooby:jooby-netty
Critical
over 5 years ago
Improper Verification of Cryptographic Signature in Pure-Python ECDSA
pypi
ecdsa
Critical
over 5 years ago
Micronaut's HTTP client is vulnerable to HTTP Request Header Injection
maven
io.micronaut:micronaut-http-client
Critical
over 5 years ago
Local file inclusion vulnerability in http4s
maven
org.http4s:http4s-server_2.12
Critical
over 5 years ago
GitHub personal access token leaking into temporary EasyBuild (debug) logs
pypi
easybuild-framework
Critical
over 5 years ago
Insufficient Verification of Data Authenticity in python-keystoneclient
pypi
python-keystoneclient
Critical
over 5 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 5 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Filter by Severity
Filter by Ecosystem
npm
1,024
maven
931
packagist
558
pypi
520
go
323
cargo
168
rubygems
122
nuget
71
actions
9
hex
5
swift
2
Filter by Package
magento/community-edition
25
dolibarr/dolibarr
25
com.fasterxml.jackson.core:jackson-databind
24
net.mingsoft:ms-mcms
19
org.jenkins-ci.main:jenkins-core
19
com.liferay.portal:release.dxp.bom
18
com.liferay.portal:release.portal.bom
18
salt
17
moodle/moodle
16
magento/project-community-edition
16
topthink/framework
15
mlflow
14
Django
14
org.apache.dubbo:dubbo
13
drupal/core
13
org.xwiki.platform:xwiki-platform-oldcore
12
org.apache.struts:struts2-core
12
gogs.io/gogs
11
langchain
11
org.xwiki.platform:xwiki-platform-web-templates
10
drupal/drupal
10
vm2
10
phpmyadmin/phpmyadmin
10
apache-airflow
10
ansible
9
funadmin/funadmin
9
flowise
9
github.com/argoproj/argo-cd/v2
8
shopware/platform
8
rdiffweb
8
org.xwiki.platform:xwiki-platform-administration-ui
8
froxlor/froxlor
8
paddlepaddle
7
pyload-ng
7
studio-42/elfinder
7
sequelize
7
parse-server
7
github.com/argoproj/argo-cd
7
vllm
7
zendframework/zendframework1
7
rusqlite
7
github.com/rancher/rancher
7
tensorflow
6
org.jeecgframework.boot:jeecg-boot-common
6
thorsten/phpmyfaq
6
org.apache.shiro:shiro-core
6
craftcms/cms
6
github.com/answerdev/answer
6
github.com/hashicorp/vault
6
zendframework/zendframework
6
ezsystems/ezpublish-kernel
6
symfony/symfony
6
typo3/cms
6
org.apache.inlong:manager-pojo
6
aaptjs
6
mautic/core
6
nilsteampassnet/teampass
6
pillow
6
mercurial
6
centreon/centreon
5
ckb
5
prestashop/prestashop
5
github.com/grafana/grafana
5
org.jenkins-ci.plugins:script-security
5
steal
5
librenms/librenms
5
org.apache.openmeetings:openmeetings-parent
5
org.xwiki.platform:xwiki-platform-web
5
Microsoft.ChakraCore
5
executorch
5
github.com/mattermost/mattermost/server/v8
5
shopware/core
5
org.xwiki.commons:xwiki-commons-xml
5
bentoml
5
safe-eval
5
dompdf/dompdf
5
org.jeecgframework.boot:jeecg-boot-parent
5
code.gitea.io/gitea
5
tensorflow-gpu
5
adodb/adodb-php
5
dbgpt
5
tensorflow-cpu
5
nodebb
5
org.apache.solr:solr-core
4
apache-airflow-providers-apache-hive
4
nukeviet/nukeviet
4
org.xwiki.platform:xwiki-platform-search-ui
4
ai.h2o:h2o-core
4
org.apache.inlong:manager-service
4
ait-core
4
showdoc/showdoc
4
gradio
4
org.jeecgframework.boot:jeecg-boot-base-core
4
Pillow
4
tribalsystems/zenario
4
baserproject/basercms
4
cobbler
4
ruby-saml
4
org.apache.tomcat.embed:tomcat-embed-core
4
ray
4
feehi/cms
4
org.xwiki.platform:xwiki-platform-appwithinminutes-ui
4
realms-shim
4
openssl-src
4
org.cloudfoundry.identity:cloudfoundry-identity-server
4
net.opentsdb:opentsdb
4
swagger-ui
4
org.apache.tapestry:tapestry-core
4
org.xwiki.platform:xwiki-platform-flamingo-skin-resources
4
messagepack-rs
4
org.apache.tomcat:tomcat-catalina
4
hermes-engine
4
org.apache.kylin:kylin-server-base
4
h2o
4
github.com/usememos/memos
4
smallvec
4
shopware/shopware
4
safer-eval
4
langchain-experimental
4
calibreweb
4
simplesamlphp/simplesamlphp
4
contao/core-bundle
4
org.eclipse.jetty:jetty-server
4
org.apache.ignite:ignite-core
4
aim
4
contao/contao
4
mongoose
4
org.apache.activemq:activemq-client
4
nokogiri
4
github.com/pterodactyl/wings
3
org.apache.inlong:manager-web
3
phpmailer/phpmailer
3
modoboa
3
codeigniter/framework
3
agentscope
3
publify_core
3
github.com/dexidp/dex
3
github.com/cosmos/ibc-go/v2
3
namada-apps
3
strapi
3
github.com/cosmos/ibc-go/v7
3
ro.pippo:pippo-core
3
handlebars
3
org.apache.jmeter:ApacheJMeter
3
org.apache.dolphinscheduler:dolphinscheduler
3
apache-submarine
3
torchserve
3
com.alibaba:dubbo
3
github.com/beego/beego/v2
3
picklescan
3
actix-web
3
SQLAlchemy
3
org.xwiki.platform:xwiki-platform-icon-ui
3
com.hazelcast:hazelcast
3
xcb
3
github.com/gofiber/fiber/v2
3
xml-crypto
3
org.xwiki.platform:xwiki-platform-distribution-war
3
github.com/cosmos/ibc-go/v3
3
mitmproxy
3
codeigniter4/framework
3
org.zenframework.z8.dependencies.commons:log4j-1.2.17
3
vyper
3
jsrsasign
3
ibexa/core
3
pyyaml
3
log4j:log4j
3
elefant/cms
3
org.xwiki.platform:xwiki-platform-panels-ui
3
llama-index
3
com.jflyfox:jflyfox_jfinal
3
org.apache.any23:apache-any23
3
org.xwiki.platform:xwiki-platform-flamingo-theme-ui
3
PaddlePaddle
3
github.com/cosmos/ibc-go/v6
3
silverstripe/framework
3
github.com/IceWhaleTech/CasaOS
3
lmdb
3
impresscms/impresscms
3
dulwich
3
id-map
3
rubygems-update
3
io.dataease:dataease-plugin-common
3
github.com/cosmos/ibc-go/v5
3
facade/ignition
3
github.com/cosmos/ibc-go
3
ezsystems/ezplatform-kernel
3
francoisjacquet/rosariosis
3
slpjs
3
alextselegidis/easyappointments
3
codiad/codiad
3
org.apache.ozone:ozone-main
3
github.com/bnb-chain/tss-lib
3
org.keycloak:keycloak-core
3
org.jeecgframework.boot:jeecg-module-system
3
slp-validate
3
github.com/cosmos/ibc-go/v4
3
edu.stanford.nlp:stanford-corenlp
3
llama-index-core
3
browserify-shim
3
Filter by Repository
https://github.com/xwiki/xwiki-platform
100
https://github.com/FasterXML/jackson-databind
24
https://github.com/jenkinsci/jenkins
18
https://github.com/apache/airflow
16
https://github.com/django/django
15
https://github.com/Dolibarr/dolibarr
15
https://github.com/mlflow/mlflow
14
https://github.com/saltstack/salt
13
https://github.com/langchain-ai/langchain
12
https://github.com/argoproj/argo-cd
11
https://github.com/gogs/gogs
11
https://github.com/apache/inlong
10
https://github.com/ming-soft/MCMS
10
https://github.com/patriksimek/vm2
10
https://github.com/magento/magento2
10
https://github.com/python-pillow/Pillow
9
https://github.com/funadmin/funadmin
9
https://github.com/jeecgboot/jeecg-boot
9
https://github.com/PaddlePaddle/Paddle
9
https://github.com/top-think/framework
9
https://github.com/go-gitea/gitea
8
https://github.com/apache/struts
8
https://github.com/ansible/ansible
8
https://github.com/ikus060/rdiffweb
8
https://github.com/Studio-42/elFinder
7
https://github.com/parse-community/parse-server
7
https://github.com/pyload/pyload
7
https://github.com/rusqlite/rusqlite
7
https://github.com/sequelize/sequelize
7
https://github.com/apache/tomcat
7
https://github.com/rancher/rancher
7
https://github.com/symfony/symfony
7
https://github.com/run-llama/llama_index
7
https://github.com/FlowiseAI/Flowise
7
https://github.com/xwiki/xwiki-commons
6
https://github.com/shenzhim/aaptjs
6
https://github.com/liferay/liferay-portal
6
https://github.com/shopware/platform
6
https://github.com/dompdf/dompdf
6
https://github.com/answerdev/answer
6
https://github.com/thorsten/phpmyfaq
6
https://github.com/tensorflow/tensorflow
6
https://github.com/NodeBB/NodeBB
5
https://github.com/craftcms/cms
5
https://github.com/auth0/auth0-PHP
5
https://github.com/nervosnetwork/ckb
5
https://github.com/apache/activemq
5
https://github.com/froxlor/froxlor
5
https://github.com/PrestaShop/PrestaShop
5
https://github.com/SAML-Toolkits/ruby-saml
5
https://github.com/hacksparrow/safe-eval
5
https://github.com/spring-projects/spring-framework
5
https://github.com/ADOdb/ADOdb
5
https://github.com/pytorch/executorch
5
https://github.com/twisted/twisted
5
https://github.com/stealjs/steal
5
https://github.com/moodle/moodle
5
https://github.com/dromara/hutool
5
https://github.com/grafana/grafana
5
https://github.com/vllm-project/vllm
5
https://github.com/keycloak/keycloak
5
https://github.com/OpenTSDB/opentsdb
4
https://github.com/janeczku/calibre-web
4
https://github.com/pippo-java/pippo
4
https://github.com/liufee/cms
4
https://github.com/cobbler/cobbler
4
https://github.com/xwiki/xwiki-rendering
4
https://github.com/cloudfoundry/uaa
4
https://github.com/otake84/messagepack-rs
4
https://github.com/gradio-app/gradio
4
https://github.com/ezsystems/ezpublish-kernel
4
https://github.com/ray-project/ray
4
https://github.com/phpmyadmin/phpmyadmin
4
https://github.com/swagger-api/swagger-ui
4
https://github.com/usememos/memos
4
https://github.com/star7th/showdoc
4
https://github.com/dataease/dataease
4
https://github.com/contao/contao
4
https://github.com/bentoml/BentoML
4
https://github.com/CVEProject/cvelist
4
https://github.com/servo/rust-smallvec
4
https://github.com/hwchase17/langchain
4
https://github.com/nilsteampassnet/TeamPass
4
https://github.com/kubernetes/kubernetes
4
https://github.com/mautic/mautic
4
https://github.com/shopware/shopware
3
https://github.com/facade/ignition
3
https://github.com/mitmproxy/mitmproxy
3
https://github.com/TeamSeri0us/pocs
3
https://github.com/pimcore/pimcore
3
https://github.com/actix/actix-web
3
https://github.com/smarty-php/smarty
3
https://github.com/mmaitre314/picklescan
3
https://github.com/simplesamlphp/simplesamlphp
3
https://github.com/dexidp/dex
3
https://github.com/beego/beego
3
https://github.com/opencast/opencast
3
https://github.com/publify/publify
3
https://github.com/cosmos/ibc-go
3
https://github.com/thlorenz/browserify-shim
3
https://github.com/ezsystems/ezplatform-kernel
3
https://github.com/gofiber/fiber
3
https://github.com/centreon/centreon-archived
3
https://github.com/ImpressCMS/impresscms
3
https://github.com/ibexa/core
3
https://github.com/rubygems/rubygems.org
3
https://github.com/denoland/deno
3
https://github.com/geoserver/geoserver
3
https://github.com/simpleledger/slpjs
3
https://github.com/apache/shiro
3
https://github.com/baserproject/basercms
3
https://github.com/Automattic/mongoose
3
https://github.com/pgadmin-org/pgadmin4
3
https://github.com/feathersjs-ecosystem/feathers-sequelize
3
https://github.com/shopware5/shopware
3
https://github.com/node-saml/xml-crypto
3
https://github.com/octobercms/october
3
https://github.com/vyperlang/vyper
3
https://github.com/chaos-mesh/chaos-mesh
3
https://github.com/anoma/namada
3
https://github.com/pterodactyl/wings
3
https://github.com/codeigniter4/CodeIgniter4
3
https://github.com/crewjam/saml
3
https://github.com/github/securitylab
3
https://github.com/TribalSystems/Zenario
3
https://github.com/dwisiswant0/advisory
3
https://github.com/facebook/hermes
3
https://github.com/apache/dolphinscheduler
3
https://github.com/LetianYuan/My-CVE-Public-References
3
https://github.com/h2oai/h2o-3
3
https://github.com/sparklemotion/nokogiri
3
https://github.com/yaml/pyyaml
3
https://github.com/NASA-AMMOS/AIT-Core
3
https://github.com/hazelcast/hazelcast
3
https://github.com/mbechler/marshalsec
3
https://github.com/neorazorx/facturascripts
3
https://github.com/strapi/strapi
3
https://github.com/kjur/jsrsasign
3
https://github.com/andrewhickman/id-map
3
https://github.com/apache/camel
3
https://github.com/nukeviet/nukeviet
3
https://github.com/NVIDIA/NVFlare
3
https://github.com/rubygems/rubygems
3
https://github.com/librenms/librenms
3
https://github.com/pytorch/serve
3
https://github.com/PHPMailer/PHPMailer
3
https://github.com/pytorch/pytorch
3
https://github.com/jflyfox/jfinal_cms
3
https://github.com/chakra-core/ChakraCore
3
https://github.com/jbroadway/elefant
3
https://github.com/sqlalchemy/sqlalchemy
3
https://github.com/rails/rails
3
https://github.com/eosphoros-ai/DB-GPT
3
https://github.com/modoboa/modoboa
3
https://github.com/better-auth/better-auth
2
https://github.com/mpdavis/python-jose
2
https://github.com/intelliants/subrion
2
https://github.com/apache/openmeetings
2
https://github.com/Microsoft/ChakraCore
2
https://github.com/http4s/http4s
2
https://github.com/javamelody/javamelody
2
https://github.com/NVIDIA/gpu-operator
2
https://github.com/graphite-project/graphite-web
2
https://github.com/lightning-ai/pytorch-lightning
2
https://github.com/BerriAI/litellm
2
https://github.com/evmos/evmos
2
https://github.com/frohoff/ysoserial
2
https://github.com/firebase/php-jwt
2
https://github.com/Islandora/Crayfish
2
https://github.com/rochacbruno/quokka
2
https://github.com/RaspAP/raspap-webgui
2
https://github.com/hashicorp/vault
2
https://github.com/HtmlUnit/htmlunit
2
https://github.com/Pylons/waitress
2
https://github.com/ionicabizau/parse-url
2
https://github.com/apache/pinot
2
https://github.com/libxmljs/libxmljs
2
https://github.com/qcubed/qcubed
2
https://github.com/apache/kylin
2
https://github.com/torrentpier/torrentpier
2
https://github.com/hashicorp/go-getter
2
https://github.com/rest-client/rest-client
2
https://github.com/cockpit-hq/cockpit
2
https://github.com/jenkinsci/script-security-plugin
2
https://github.com/node-saml/node-saml
2
https://github.com/apache/zeppelin
2
https://github.com/totaljs/framework
2
https://github.com/jfinal/jfinal
2
https://github.com/jmrozanec/cron-utils
2
https://github.com/getgrav/grav
2
https://github.com/nuxt/nuxt
2
https://github.com/nats-io/jwt
2
https://github.com/rubyzip/rubyzip
2
https://github.com/vufind-org/vufind
2
https://github.com/Admidio/admidio
2
https://github.com/simpleledger/slp-validate.js
2
https://github.com/nats-io/nats-server
2
https://github.com/OpenZeppelin/openzeppelin-contracts
2
https://github.com/ahdinosaur/set-in
2