Browse Security Advisories
Moderate Security Advisories for https://github.com/silverstripe/silverstripe-framework from github Clear Filters
Moderate
over 1 year ago
Silverstripe Framework user enumeration via timing attack on login and password reset forms
packagist
silverstripe/framework
Moderate
over 1 year ago
Silverstripe Framework has a XSS vulnerability in HTML editor
packagist
silverstripe/framework
Moderate
over 1 year ago
Silverstripe Framework has a XSS in form messages
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe uses TinyMCE which allows svg files linked in object tags
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework may disclose database credentials during connection failure
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework vulnerable to member disclosure in login form
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework uploaded PHP script execution in assets
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework Privilege Escalation Risk in Member Edit form
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework's URL parameters `isDev` and `isTest` unguarded
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework users inadvertently passing sensitive data to LoginAttempt
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework has Cross-site Scripting vulnerability in page history comparison
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework has Cross-site Scripting vulnerability in page name
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework member disclosure in login form
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField`
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework's `Member.Name` is not escaped
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework ChangePasswordForm does not check `Member::canLogIn()`
packagist
silverstripe/framework
Moderate
about 2 years ago
silverstripe/framework ReadOnly transformation for formfields exploitable
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe Missing CSRF protection in login form
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe Missing security check on dev/build/defaults
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe Form field validation message XSS vulnerability
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe framework is vulnerable to XSS in install.php
packagist
silverstripe/framework
Moderate
about 2 years ago
SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe XSS in dev/build returnURL Parameter
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe External redirection risk in Security?ReturnURL
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe XSS in Director::force_redirect()
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe XSS In rewritten hash links
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe XSS in TreeDropdownField and TreeMultiSelectField
packagist
silverstripe/framework
Moderate
about 2 years ago
SilverStripe framework XML Quadratic Blowup Attack
packagist
silverstripe/framework
Moderate
about 2 years ago
Silverstripe IE requests not properly behaving with rewritehashlinks
packagist
silverstripe/framework
Moderate
over 2 years ago
Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
packagist
silverstripe/framework
Moderate
over 3 years ago
Missing permission check of canView in GridFieldPrintButton
packagist
silverstripe/framework
Moderate
over 3 years ago
Open redirect vulnerability on CMSSecurity relogin screen
packagist
silverstripe/framework
Moderate
about 4 years ago
Quadratic blowup in Convert::xml2array()
packagist
silverstripe/framework
Moderate
about 4 years ago
SilverStripe Web Cache Poisoning through HTTPRequestBuilder
packagist
silverstripe/framework
Moderate
about 4 years ago
SilverStripe Denial of Service on flush and development URL tools
packagist
silverstripe/framework
Moderate
over 4 years ago
Business Logic Errors in SilverStripe Framework
packagist
silverstripe/framework
Moderate
almost 5 years ago
Cross-site Scripting in SilverStripe Framework
packagist
silverstripe/admin
Moderate
over 6 years ago
SilverStripe Versioned Files module Unpublished files are exposed publicly
packagist
silverstripe/framework, symbiote/silverstripe-versionedfiles
Filter by Severity
Filter by Source
Filter by Ecosystem
maven
3,706
packagist
3,673
pypi
2,713
npm
2,510
go
2,235
nuget
2,164
cargo
615
rubygems
495
hex
38
swift
22
actions
16
pub
3
Filter by Package
moodle/moodle
318
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
191
tensorflow-gpu
186
org.jenkins-ci.main:jenkins-core
152
github.com/mattermost/mattermost/server/v8
129
github.com/mattermost/mattermost-server
116
com.liferay.portal:release.portal.bom
114
typo3/cms
112
org.apache.tomcat:tomcat
99
Magick.NET-Q16-HDRI-AnyCPU
97
Magick.NET-Q16-AnyCPU
97
Magick.NET-Q16-HDRI-x86
92
Magick.NET-Q16-HDRI-OpenMP-arm64
92
pimcore/pimcore
91
Magick.NET-Q16-HDRI-x64
91
Magick.NET-Q16-HDRI-arm64
89
Magick.NET-Q16-OpenMP-arm64
89
Magick.NET-Q16-OpenMP-x64
87
Magick.NET-Q16-arm64
86
Magick.NET-Q8-AnyCPU
85
Magick.NET-Q16-x86
85
com.liferay.portal:release.dxp.bom
82
Magick.NET-Q8-x86
81
Magick.NET-Q16-x64
80
Magick.NET-Q8-OpenMP-arm64
80
Magick.NET-Q8-arm64
80
typo3/cms-core
79
Magick.NET-Q8-OpenMP-x64
78
Magick.NET-Q8-x64
75
wwbn/avideo
73
microweber/microweber
72
apache-airflow
69
silverstripe/framework
67
concrete5/concrete5
65
thorsten/phpmyfaq
64
n8n
62
craftcms/cms
59
drupal/core
57
magento/project-community-edition
57
phpmyadmin/phpmyadmin
56
dolibarr/dolibarr
56
Magick.NET-Q16-HDRI-OpenMP-x64
55
open-webui
54
github.com/usememos/memos
54
librenms/librenms
53
org.keycloak:keycloak-services
51
mantisbt/mantisbt
49
apache-superset
47
symfony/symfony
46
Django
44
code.gitea.io/gitea
44
actionpack
42
Magick.NET-Q16-OpenMP-x86
42
nocodb
41
parse-server
40
snipe/snipe-it
39
drupal/drupal
37
github.com/grafana/grafana
36
org.elasticsearch:elasticsearch
35
showdoc/showdoc
35
directus
34
shopware/platform
34
admidio/admidio
33
hono
33
picklescan
33
surrealdb
32
pypdf
32
org.keycloak:keycloak-core
32
getgrav/grav
30
nova
30
github.com/mattermost/mattermost-server/v6
29
baserproject/basercms
29
plone
29
mautic/core
29
shopware/core
29
getkirby/cms
28
next
28
vllm
28
intelliants/subrion
28
moin
27
ansible
27
gogs.io/gogs
26
rack
26
k8s.io/kubernetes
25
aiohttp
24
froxlor/froxlor
24
axios
23
phpmyfaq/phpmyfaq
23
github.com/cilium/cilium
23
Plone
23
github.com/hashicorp/vault
22
grumpydictator/firefly-iii
22
github.com/openfga/openfga
21
flowise
21
wasmtime
21
nilsteampassnet/teampass
21
code.vikunja.io/api
21
gradio
21
github.com/traefik/traefik/v3
21
matrix-synapse
21
github.com/answerdev/answer
21
DotNetNuke.Core
21
pyload-ng
20
kimai/kimai
20
mediawiki/core
20
django
20
github.com/traefik/traefik/v2
20
shopware/shopware
19
electron
19
statamic/cms
19
org.apache.tomcat.embed:tomcat-embed-core
19
org.apache.struts:struts2-core
19
remdex/livehelperchat
18
github.com/docker/docker
18
contao/core-bundle
18
dompurify
18
github.com/fleetdm/fleet/v4
18
github.com/hashicorp/consul
17
prestashop/prestashop
17
org.opencms:opencms-core
17
salt
17
github.com/argoproj/argo-cd/v2
17
keystone
17
sylius/sylius
16
rdiffweb
16
zendframework/zendframework1
16
github.com/siyuan-note/siyuan/kernel
16
nokogiri
16
github.com/hashicorp/nomad
16
typo3/cms-backend
16
io.undertow:undertow-core
16
weblate
15
org.apache.jspwiki:jspwiki-main
15
org.xwiki.platform:xwiki-platform-oldcore
15
yetiforce/yetiforce-crm
15
io.netty:netty-codec-http
15
glance
15
vyper
15
org.springframework.security:spring-security-core
15
com.liferay.portal:com.liferay.portal.impl
15
feehi/feehicms
14
pnpm
14
github.com/filebrowser/filebrowser/v2
14
feehi/cms
14
astro
14
tinymce
14
wagtail
14
puppet
14
deno
14
github.com/goharbor/harbor
14
Umbraco.Cms
13
com.thoughtworks.xstream:xstream
13
com.jfinal:jfinal
13
forkcms/forkcms
13
transformers
13
github.com/ethereum/go-ethereum
13
org.springframework:spring-webmvc
13
ghost
13
mistune
13
org.eclipse.jetty:jetty-server
13
vite
13
tribalsystems/zenario
13
svelte
13
github.com/zitadel/zitadel
13
helm.sh/helm/v3
13
activesupport
13
coreutils
13
craftcms/commerce
13
github.com/containerd/containerd
13
@openzeppelin/contracts-upgradeable
12
ec-cube/ec-cube
12
github.com/openbao/openbao
12
phpoffice/phpspreadsheet
12
roundup
12
github.com/traefik/traefik
12
lavalite/cms
12
@openzeppelin/contracts
12
org.bouncycastle:bcprov-jdk14
12
facturascripts/facturascripts
12
undici
12
OctoPrint
12
wallabag/wallabag
12
simplesamlphp/simplesamlphp
12
laravel/framework
12
mlflow
12
github.com/rancher/rancher
12
ckan
11
cakephp/cakephp
11
ci4-cms-erp/ci4ms
11
github.com/argoproj/argo-cd
11
org.keycloak:keycloak-parent
11
MessagePack
11
zebrad
11
TinyMCE
11
genix/cms
11
renovate
11
horizon
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/TYPO3/typo3
63
https://github.com/microweber/microweber
63
https://github.com/apache/tomcat
60
https://github.com/django/django
50
https://github.com/usememos/memos
50
https://github.com/xwiki/xwiki-platform
50
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/rails/rails
46
https://github.com/keycloak/keycloak
45
https://github.com/thorsten/phpmyfaq
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/grafana/grafana
27
https://github.com/mautic/mautic
27
https://github.com/symfony/symfony
27
https://github.com/craftcms/cms
26
https://github.com/spring-projects/spring-framework
26
https://github.com/ansible/ansible
26
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/argoproj/argo-cd
24
https://github.com/directus/directus
24
https://github.com/shopware/shopware
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/magento/magento2
20
https://github.com/apache/activemq
20
https://github.com/firefly-iii/firefly-iii
20
https://github.com/snipe/snipe-it
20
https://github.com/plone/Products.CMFPlone
20
https://github.com/cilium/cilium
19
https://github.com/contao/contao
18
https://github.com/openstack/nova
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/apache/struts
17
https://github.com/ikus060/rdiffweb
16
https://github.com/matrix-org/synapse
16
https://github.com/shopware/platform
16
https://github.com/gradio-app/gradio
16
https://github.com/netty/netty
15
https://github.com/apache/cxf
15
https://github.com/CVEProject/cvelist
15
https://github.com/vyperlang/vyper
15
https://github.com/getkirby/kirby
15
https://github.com/OpenNMS/opennms
14
https://github.com/moby/moby
14
https://github.com/x-stream/xstream
14
https://github.com/geoserver/geoserver
14
https://github.com/tinymce/tinymce
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/baserproject/basercms
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/saltstack/salt
14
https://github.com/froxlor/froxlor
14
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/go-gitea/gitea
13
https://github.com/octobercms/october
13
https://github.com/containerd/containerd
13
https://github.com/strapi/strapi
13
https://github.com/openfga/openfga
13
https://github.com/apache/nifi
13
https://github.com/bcgit/bc-java
13
https://github.com/goharbor/harbor
13
https://github.com/PrestaShop/PrestaShop
13
https://github.com/rack/rack
13
https://github.com/huggingface/transformers
12
https://github.com/helm/helm
12
https://github.com/TYPO3-CMS/core
12
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/hashicorp/consul
12
https://github.com/openstack/keystone
12
https://github.com/traefik/traefik
12
https://github.com/vitejs/vite
11
https://github.com/laravel/framework
11
https://github.com/intelliants/subrion
11
https://github.com/apache/zeppelin
11
https://github.com/electron/electron
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/ethereum/go-ethereum
11
https://github.com/github/advisory-database
11
https://github.com/vaadin/platform
11
https://github.com/forkcms/forkcms
11
https://github.com/surrealdb/surrealdb
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/rancher/rancher
11
https://github.com/TryGhost/Ghost
10
https://github.com/liufee/cms
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/backstage/backstage
10
https://github.com/laurent22/joplin
10
https://github.com/vercel/next.js
10
https://github.com/wallabag/wallabag
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/vllm-project/vllm
10
https://github.com/decidim/decidim
10
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/greenpau/caddy-security
10
https://github.com/aio-libs/aiohttp
10
https://github.com/OctoPrint/OctoPrint
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/opencast/opencast
9
https://github.com/jquery/jquery
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/dotnet/runtime
9
https://github.com/urllib3/urllib3
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/puppetlabs/puppet
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/publify/publify
9
https://github.com/thorsten/phpMyFAQ
9
https://github.com/alkacon/opencms-core
9
https://github.com/opensearch-project/security
8
https://github.com/getgrav/grav
8
https://github.com/openbao/openbao
8
https://github.com/pyload/pyload
8
https://github.com/LavaLite/cms
8
https://github.com/ckan/ckan
8
https://github.com/onionshare/onionshare
8
https://github.com/gogs/gogs
8
https://github.com/hashicorp/nomad
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/openstack/glance
8
https://github.com/sulu/sulu
8
https://github.com/kubeedge/kubeedge
8
https://github.com/apache/superset
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/zendframework/zendframework
8
https://github.com/rubygems/rubygems
8
https://github.com/eclipse/jetty.project
8
https://github.com/dolibarr/dolibarr
8
https://github.com/pandao/editor.md
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/modoboa/modoboa
8
https://github.com/parse-community/parse-server
8
https://github.com/croogo/croogo
7
https://github.com/opencv/opencv
7
https://github.com/jupyter/notebook
7
https://github.com/kubevirt/kubevirt
7
https://github.com/treeverse/lakeFS
7
https://github.com/vega/vega
7
https://github.com/twbs/bootstrap
7
https://github.com/louislam/uptime-kuma
7
https://github.com/vaadin/flow
7
https://github.com/Leantime/leantime
7
https://github.com/opencontainers/runc
7
https://github.com/igniterealtime/Openfire
7
https://github.com/denoland/deno
7
https://github.com/nocodb/nocodb
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/scrapy/scrapy
7
https://github.com/zitadel/zitadel
7
https://github.com/n8n-io/n8n
7
https://github.com/modxcms/revolution
7
https://github.com/zenml-io/zenml
7
https://github.com/containers/podman
7
https://github.com/kevinpapst/kimai2
7
https://github.com/Sylius/Sylius
7
https://github.com/openstack/horizon
7
https://github.com/python-pillow/Pillow
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/py-pdf/pypdf
7
https://github.com/undertow-io/undertow
7
https://github.com/google/fscrypt
7
https://github.com/bagisto/bagisto
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/nahsra/antisamy
7
https://github.com/hashicorp/vault
7
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/janeczku/calibre-web
7
https://github.com/1Panel-dev/1Panel
6
https://github.com/jenkinsci/subversion-plugin
6
https://github.com/cui2shark/security
6
https://github.com/tecnickcom/TCPDF
6
https://github.com/oroinc/orocommerce
6
https://github.com/wagtail/wagtail
6
https://github.com/quarkusio/quarkus
6
https://github.com/jenkinsci/script-security-plugin
6
https://github.com/run-llama/llama_index
6
https://github.com/jenkinsci/config-file-provider-plugin
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/spatie/browsershot
6