Browse Security Advisories
High Security Advisories for https://github.com/craftcms/cms from github Clear Filters
High
about 1 year ago
Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI
packagist
craftcms/cms
High
over 1 year ago
Craft CMS has a potential RCE with a compromised security key
packagist
craftcms/cms
High
over 1 year ago
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
packagist
craftcms/cms
High
over 1 year ago
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
packagist
craftcms/cms
High
almost 3 years ago
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
packagist
craftcms/cms
High
about 3 years ago
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
packagist
craftcms/cms
Filter by Severity
Filter by Source
Filter by Ecosystem
npm
2,675
maven
2,563
pypi
2,358
packagist
1,843
go
1,692
nuget
1,270
cargo
542
rubygems
359
hex
33
actions
23
swift
22
pub
6
Filter by Package
Microsoft.ChakraCore
234
openclaw
194
tensorflow
122
tensorflow-cpu
111
tensorflow-gpu
110
magento/community-edition
104
moodle/moodle
68
org.jenkins-ci.main:jenkins-core
61
open-webui
58
wwbn/avideo
56
flowise
49
parse-server
49
com.fasterxml.jackson.core:jackson-databind
45
Django
43
mlflow
42
magento/project-community-edition
41
org.apache.tomcat:tomcat
40
pimcore/pimcore
38
dolibarr/dolibarr
38
apache-airflow
37
librenms/librenms
36
github.com/rancher/rancher
35
typo3/cms
32
n8n
32
drupal/core
32
getgrav/grav
32
craftcms/cms
31
gogs.io/gogs
31
salt
31
thorsten/phpmyfaq
31
typo3/cms-core
31
Plone
28
phpmyadmin/phpmyadmin
28
microweber/microweber
27
praisonai
26
nokogiri
26
org.apache.tomcat.embed:tomcat-embed-core
25
com.liferay.portal:release.portal.bom
25
org.keycloak:keycloak-services
25
org.apache.struts:struts2-core
25
symfony/symfony
24
ansible
24
drupal/drupal
24
opencv-python
23
opencv-contrib-python
23
github.com/hashicorp/vault
23
github.com/siyuan-note/siyuan/kernel
22
com.thoughtworks.xstream:xstream
22
Magick.NET-Q16-AnyCPU
22
next
22
Magick.NET-Q16-HDRI-AnyCPU
22
matrix-synapse
21
Magick.NET-Q8-x86
21
Magick.NET-Q16-x86
21
com.jfinal:jfinal
21
pillow
21
Magick.NET-Q8-AnyCPU
21
github.com/traefik/traefik/v2
21
@anthropic-ai/claude-code
21
github.com/mattermost/mattermost-server
21
Magick.NET-Q16-HDRI-x86
21
django
21
pocketmine/pocketmine-mp
20
github.com/zitadel/zitadel
20
Magick.NET-Q16-HDRI-arm64
20
org.jenkins-ci.plugins:script-security
19
froxlor/froxlor
19
Magick.NET-Q16-arm64
19
github.com/filebrowser/filebrowser/v2
19
io.undertow:undertow-core
19
com.liferay.portal:release.dxp.bom
19
Magick.NET-Q16-x64
19
Magick.NET-Q16-OpenMP-x64
19
Magick.NET-Q16-HDRI-OpenMP-arm64
19
Magick.NET-Q8-OpenMP-arm64
19
Magick.NET-Q16-OpenMP-arm64
19
Magick.NET-Q8-arm64
19
Magick.NET-Q16-HDRI-x64
19
Magick.NET-Q8-OpenMP-x64
18
Pillow
18
rack
18
gradio
18
keystone
18
Magick.NET-Q16-HDRI-OpenMP-x64
18
pyload-ng
18
rdiffweb
18
Microsoft.AspNetCore.App.Runtime.win-x64
17
shopware/platform
17
deno
17
axios
17
electron
17
mantisbt/mantisbt
17
github.com/traefik/traefik/v3
17
directus
17
getkirby/cms
17
github.com/grafana/grafana
17
shopware/core
16
Magick.NET-Q8-x64
16
picklescan
16
vllm
16
openssl-src
16
PraisonAI
16
github.com/nats-io/nats-server/v2
16
github.com/usememos/memos
16
litellm
16
org.xwiki.platform:xwiki-platform-oldcore
16
nilsteampassnet/teampass
15
Microsoft.AspNetCore.App.Runtime.win-x86
15
github.com/hashicorp/consul
15
Microsoft.NetCore.App.Runtime.win-arm64
15
org.apache.solr:solr-core
15
praisonaiagents
15
Microsoft.NetCore.App.Runtime.win-arm
15
Microsoft.AspNetCore.App.Runtime.linux-x64
15
apache-superset
15
github.com/kyverno/kyverno
15
baserproject/basercms
15
org.apache.openmeetings:openmeetings-parent
14
vyper
14
devcode-it/openstamanager
14
centreon/centreon
14
Microsoft.AspNetCore.App.Runtime.linux-arm
14
net.mingsoft:ms-mcms
14
org.apache.tomcat:tomcat-catalina
14
mautic/core
14
Microsoft.NetCore.App.Runtime.win-x86
14
Microsoft.NetCore.App.Runtime.win-x64
14
Microsoft.AspNetCore.App.Runtime.win-arm
14
@budibase/server
14
concrete5/concrete5
14
Microsoft.AspNetCore.App.Runtime.linux-arm64
14
phpoffice/phpspreadsheet
14
github.com/mattermost/mattermost/server/v8
14
snipe/snipe-it
14
org.keycloak:keycloak-core
14
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
14
mindsdb
14
pgadmin4
13
cockpit-hq/cockpit
13
statamic/cms
13
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
13
langflow
13
golang.org/x/net
13
rubygems-update
13
tar
13
phpmyfaq/phpmyfaq
13
github.com/gotenberg/gotenberg/v8
13
Microsoft.AspNetCore.App.Runtime.win-arm64
13
github.com/hashicorp/nomad
13
Microsoft.AspNetCore.App.Runtime.osx-x64
13
surrealdb
12
activerecord
12
github.com/ethereum/go-ethereum
12
code.gitea.io/gitea
12
github.com/argoproj/argo-cd/v2
12
openmage/magento-lts
12
praisonai-platform
12
github.com/argoproj/argo-cd
12
silverstripe/framework
12
laravel/framework
11
intelliants/subrion
11
org.springframework.security:spring-security-core
11
composer/composer
11
Microsoft.NetCore.App.Runtime.linux-musl-x64
11
Microsoft.NetCore.App.Runtime.linux-musl-arm64
11
Magick.NET-Q16-OpenMP-x86
11
actionpack
11
Microsoft.NetCore.App.Runtime.linux-arm64
11
Microsoft.NetCore.App.Runtime.linux-x64
11
Microsoft.NetCore.App.Runtime.linux-musl-arm
11
github.com/zitadel/zitadel/v2
11
github.com/ollama/ollama
11
Microsoft.NetCore.App.Runtime.linux-arm
11
org.keycloak:keycloak-parent
11
Glances
10
k8s.io/ingress-nginx
10
@haxtheweb/haxcms-nodejs
10
DotNetNuke.Core
10
github.com/coredns/coredns
10
handlebars
10
github.com/minio/minio
10
nova
10
nltk
10
github.com/docker/docker
10
funadmin/funadmin
10
fuxa-server
10
lollms
10
Microsoft.NetCore.App.Runtime.osx-arm64
10
github.com/traefik/traefik
10
admidio/admidio
10
yeswiki/yeswiki
10
org.bouncycastle:bcprov-jdk14
10
oj
10
k8s.io/kubernetes
10
Microsoft.NetCore.App.Runtime.osx-x64
10
fickling
10
cryptography
10
apollo-router
10
node-forge
9
mercurial
9
Filter by Repository
https://github.com/chakra-core/ChakraCore
204
https://github.com/tensorflow/tensorflow
122
https://github.com/xwiki/xwiki-platform
64
https://github.com/django/django
52
https://github.com/FasterXML/jackson-databind
44
https://github.com/jenkinsci/jenkins
43
https://github.com/apache/tomcat
42
https://github.com/apache/airflow
39
https://github.com/python-pillow/Pillow
35
https://github.com/moodle/moodle
34
https://github.com/keycloak/keycloak
32
https://github.com/pimcore/pimcore
28
https://github.com/librenms/librenms
28
https://github.com/dotnet/runtime
28
https://github.com/rancher/rancher
27
https://github.com/opencv/opencv
25
https://github.com/microweber/microweber
25
https://github.com/symfony/symfony
23
https://github.com/x-stream/xstream
22
https://github.com/Dolibarr/dolibarr
21
https://github.com/sparklemotion/nokogiri
20
https://github.com/apache/struts
20
https://github.com/ansible/ansible
19
https://github.com/spring-projects/spring-framework
19
https://github.com/TYPO3/typo3
18
https://github.com/pmmp/PocketMine-MP
18
https://github.com/thorsten/phpmyfaq
18
https://github.com/zitadel/zitadel
18
https://github.com/parse-community/parse-server
17
https://github.com/ikus060/rdiffweb
17
https://github.com/mlflow/mlflow
16
https://github.com/gradio-app/gradio
16
https://github.com/plone/Products.CMFPlone
16
https://github.com/getgrav/grav
15
https://github.com/kubernetes/kubernetes
15
https://github.com/rails/rails
15
https://github.com/github/advisory-database
15
https://github.com/apache/inlong
15
https://github.com/jenkinsci/script-security-plugin
14
https://github.com/usememos/memos
14
https://github.com/vyperlang/vyper
14
https://github.com/argoproj/argo-cd
14
https://github.com/grafana/grafana
14
https://github.com/openstack/keystone
14
https://github.com/liferay/liferay-portal
13
https://github.com/saltstack/salt
13
https://github.com/mautic/mautic
13
https://github.com/mindsdb/mindsdb
13
https://github.com/matrix-org/synapse
13
https://github.com/undertow-io/undertow
13
https://github.com/electron/electron
12
https://github.com/directus/directus
12
https://github.com/hashicorp/consul
12
https://github.com/denoland/deno
12
https://github.com/PHPOffice/PhpSpreadsheet
12
https://github.com/silverstripe/silverstripe-framework
11
https://github.com/apache/nifi
11
https://github.com/dotnet/aspnetcore
11
https://github.com/hashicorp/vault
11
https://github.com/strapi/strapi
11
https://github.com/run-llama/llama_index
11
https://github.com/funadmin/funadmin
10
https://github.com/surrealdb/surrealdb
10
https://github.com/FlowiseAI/Flowise
10
https://github.com/go-gitea/gitea
10
https://github.com/centreon/centreon
10
https://github.com/rack/rack
10
https://github.com/octobercms/october
10
https://github.com/OpenMage/magento-lts
10
https://github.com/netty/netty
10
https://github.com/golang/go
10
https://github.com/nilsteampassnet/teampass
9
https://github.com/rusqlite/rusqlite
9
https://github.com/vercel/next.js
9
https://github.com/traefik/traefik
9
https://github.com/laravel/framework
9
https://github.com/spring-projects/spring-security
9
https://github.com/openstack/nova
9
https://github.com/cloudfoundry/uaa
9
https://github.com/apache/camel
9
https://github.com/cui2shark/cms
9
https://github.com/apache/cxf
9
https://github.com/anthropics/claude-code
9
https://github.com/apollographql/router
9
https://github.com/pyload/pyload
9
https://github.com/opencontainers/runc
9
https://github.com/snipe/snipe-it
9
https://github.com/nervosnetwork/ckb
9
https://github.com/geoserver/geoserver
9
https://github.com/h2oai/h2o-3
9
https://github.com/phpmyadmin/phpmyadmin
8
https://github.com/shopware/platform
8
https://github.com/craftcms/cms
8
https://github.com/OpenRefine/OpenRefine
8
https://github.com/gogs/gogs
8
https://github.com/vllm-project/vllm
8
https://github.com/pyca/cryptography
8
https://github.com/cockpit-hq/cockpit
8
https://github.com/PaddlePaddle/Paddle
8
https://github.com/dnnsoftware/Dnn.Platform
8
https://github.com/nats-io/nats-server
8
https://github.com/apache/kylin
8
https://github.com/OPCFoundation/UA-.NETStandard
8
https://github.com/bcgit/bc-java
8
https://github.com/open-webui/open-webui
8
https://github.com/backstage/backstage
8
https://github.com/TYPO3/TYPO3.CMS
8
https://github.com/filebrowser/filebrowser
7
https://github.com/cobbler/cobbler
7
https://github.com/smarty-php/smarty
7
https://github.com/faucetsdn/ryu
7
https://github.com/magento/magento2
7
https://github.com/PHPMailer/PHPMailer
7
https://github.com/DSpace/DSpace
7
https://github.com/YesWiki/yeswiki
7
https://github.com/composer/composer
7
https://github.com/rubygems/rubygems
7
https://github.com/contao/contao
7
https://github.com/xuxueli/xxl-job
7
https://github.com/shopware/shopware
7
https://github.com/apache/activemq
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/parisneo/lollms
7
https://github.com/eclipse/jetty.project
7
https://github.com/mantisbt/mantisbt
7
https://github.com/mattermost/mattermost
7
https://github.com/quarkusio/quarkus
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/ImageMagick/ImageMagick
6
https://github.com/CVEProject/cvelist
6
https://github.com/nautobot/nautobot
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/OpenNMS/opennms
6
https://github.com/containers/podman
6
https://github.com/getsentry/sentry
6
https://github.com/WWBN/AVideo
6
https://github.com/getkirby/kirby
6
https://github.com/kyverno/kyverno
6
https://github.com/cilium/cilium
6
https://github.com/intelliants/subrion
6
https://github.com/cefsharp/CefSharp
6
https://github.com/dromara/hutool
6
https://github.com/RaspAP/raspap-webgui
6
https://github.com/cosmos/cosmos-sdk
6
https://github.com/kiwitcms/Kiwi
6
https://github.com/froxlor/froxlor
6
https://github.com/sequelize/sequelize
6
https://github.com/OpenZeppelin/openzeppelin-contracts
6
https://github.com/TYPO3-CMS/core
6
https://github.com/ethyca/fides
6
https://github.com/aubio/aubio
6
https://github.com/opencast/opencast
6
https://github.com/nilsteampassnet/TeamPass
6
https://github.com/hyperledger/fabric
6
https://github.com/Graylog2/graylog2-server
6
https://github.com/minio/minio
6
https://github.com/bodil/sized-chunks
6
https://github.com/guzzle/guzzle
6
https://github.com/goharbor/harbor
6
https://github.com/protocolbuffers/protobuf
6
https://github.com/pgadmin-org/pgadmin4
6
https://github.com/istio/istio
6
https://github.com/gravitl/netmaker
6
https://github.com/npm/node-tar
6
https://github.com/drupal/core
6
https://github.com/langchain-ai/langchain
6
https://github.com/haxtheweb/issues
6
https://github.com/beego/beego
5
https://github.com/apache/hadoop
5
https://github.com/cloudflare/cfrpki
5
https://sourceforge.net/projects/phpmyadmin.sourceforge.net
5
https://github.com/PrestaShop/PrestaShop
5
https://github.com/element-hq/synapse
5
https://github.com/ethereum/go-ethereum
5
https://github.com/forkcms/forkcms
5
https://github.com/IBAX-io/go-ibax
5
https://github.com/zopefoundation/Zope
5
https://github.com/vantage6/vantage6
5
https://github.com/codeigniter4/CodeIgniter4
5
https://github.com/apache/geode
5
https://github.com/n8n-io/n8n
5
https://github.com/answerdev/answer
5
https://github.com/hashicorp/go-getter
5
https://github.com/BlackFan/client-side-prototype-pollution
5
https://github.com/pear/Archive_Tar
5
https://github.com/statamic/cms
5
https://github.com/zendframework/zendframework
5
https://github.com/docker/docker
5
https://github.com/apache/xmlgraphics-batik
5
https://github.com/thorsten/phpMyFAQ
5
https://github.com/sebhildebrandt/systeminformation
5
https://github.com/opencart/opencart
5
https://github.com/hpcng/singularity
5
https://github.com/faisalman/ua-parser-js
5
https://github.com/bolt/bolt
5
https://github.com/cri-o/cri-o
5
https://github.com/openstack/neutron
5
https://github.com/HumanSignal/label-studio
5
https://github.com/cometbft/cometbft
5