Browse Security Advisories
Moderate Security Advisories for https://github.com/x-stream/xstream from github Clear Filters
Moderate
almost 4 years ago
Denial of Service due to parser crash
maven
com.fasterxml.woodstox:woodstox-core
Moderate
almost 5 years ago
XStream can cause a Denial of Service
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an Arbitrary Code Execution attack
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an Arbitrary Code Execution attack
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an Arbitrary Code Execution attack
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an Arbitrary Code Execution attack
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to a Remote Command Execution attack
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an Arbitrary Code Execution attack
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
Server-Side Forgery Request can be activated unmarshalling with XStream
maven
com.thoughtworks.xstream:xstream
Moderate
over 5 years ago
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
maven
com.thoughtworks.xstream:xstream
Filter by Severity
Filter by Source
Filter by Ecosystem
maven
3,703
packagist
3,674
pypi
2,706
npm
2,506
go
2,240
nuget
2,150
cargo
615
rubygems
493
hex
38
swift
22
actions
16
pub
3
Filter by Package
moodle/moodle
318
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
189
tensorflow-gpu
184
org.jenkins-ci.main:jenkins-core
152
github.com/mattermost/mattermost/server/v8
129
github.com/mattermost/mattermost-server
115
com.liferay.portal:release.portal.bom
114
typo3/cms
111
org.apache.tomcat:tomcat
99
Magick.NET-Q16-AnyCPU
97
Magick.NET-Q16-HDRI-AnyCPU
97
Magick.NET-Q16-HDRI-OpenMP-arm64
92
pimcore/pimcore
91
Magick.NET-Q16-HDRI-x86
90
Magick.NET-Q16-HDRI-x64
90
Magick.NET-Q16-HDRI-arm64
88
Magick.NET-Q16-OpenMP-x64
87
Magick.NET-Q16-OpenMP-arm64
87
Magick.NET-Q16-arm64
86
Magick.NET-Q16-x86
85
Magick.NET-Q8-AnyCPU
85
com.liferay.portal:release.dxp.bom
82
Magick.NET-Q16-x64
81
typo3/cms-core
80
Magick.NET-Q8-x86
79
Magick.NET-Q8-OpenMP-arm64
78
Magick.NET-Q8-arm64
77
Magick.NET-Q8-OpenMP-x64
76
wwbn/avideo
73
microweber/microweber
72
Magick.NET-Q8-x64
72
apache-airflow
69
silverstripe/framework
67
concrete5/concrete5
65
thorsten/phpmyfaq
64
n8n
62
craftcms/cms
59
drupal/core
57
magento/project-community-edition
57
phpmyadmin/phpmyadmin
56
dolibarr/dolibarr
56
Magick.NET-Q16-HDRI-OpenMP-x64
54
open-webui
54
github.com/usememos/memos
54
librenms/librenms
53
org.keycloak:keycloak-services
51
mantisbt/mantisbt
49
apache-superset
47
symfony/symfony
44
code.gitea.io/gitea
44
Django
44
actionpack
42
nocodb
41
parse-server
40
Magick.NET-Q16-OpenMP-x86
40
snipe/snipe-it
39
drupal/drupal
37
github.com/grafana/grafana
36
showdoc/showdoc
35
org.elasticsearch:elasticsearch
35
directus
34
shopware/platform
34
hono
33
picklescan
33
admidio/admidio
33
org.keycloak:keycloak-core
32
surrealdb
32
pypdf
32
github.com/mattermost/mattermost-server/v6
30
shopware/core
30
getgrav/grav
30
nova
30
mautic/core
29
baserproject/basercms
29
plone
29
intelliants/subrion
28
next
28
vllm
28
getkirby/cms
28
moin
27
ansible
27
gogs.io/gogs
26
rack
26
froxlor/froxlor
24
k8s.io/kubernetes
24
aiohttp
24
github.com/cilium/cilium
23
Plone
23
phpmyfaq/phpmyfaq
23
axios
23
github.com/hashicorp/vault
22
grumpydictator/firefly-iii
22
github.com/answerdev/answer
21
github.com/traefik/traefik/v2
21
matrix-synapse
21
flowise
21
nilsteampassnet/teampass
21
DotNetNuke.Core
21
gradio
21
github.com/openfga/openfga
21
wasmtime
21
code.vikunja.io/api
21
pyload-ng
20
kimai/kimai
20
shopware/shopware
20
github.com/traefik/traefik/v3
20
mediawiki/core
20
django
20
statamic/cms
19
org.apache.tomcat.embed:tomcat-embed-core
19
org.apache.struts:struts2-core
19
electron
19
github.com/fleetdm/fleet/v4
18
dompurify
18
contao/core-bundle
18
remdex/livehelperchat
18
github.com/docker/docker
18
salt
17
org.opencms:opencms-core
17
github.com/hashicorp/consul
17
prestashop/prestashop
17
github.com/argoproj/argo-cd/v2
17
keystone
17
github.com/hashicorp/nomad
16
github.com/siyuan-note/siyuan/kernel
16
typo3/cms-backend
16
sylius/sylius
16
rdiffweb
16
zendframework/zendframework1
16
nokogiri
16
io.undertow:undertow-core
16
org.springframework.security:spring-security-core
15
org.xwiki.platform:xwiki-platform-oldcore
15
yetiforce/yetiforce-crm
15
vyper
15
weblate
15
org.apache.jspwiki:jspwiki-main
15
glance
15
io.netty:netty-codec-http
15
com.liferay.portal:com.liferay.portal.impl
15
github.com/goharbor/harbor
14
wagtail
14
feehi/cms
14
puppet
14
activesupport
14
github.com/filebrowser/filebrowser/v2
14
pnpm
14
astro
14
tinymce
14
deno
14
feehi/feehicms
14
vite
13
mistune
13
github.com/ethereum/go-ethereum
13
com.jfinal:jfinal
13
transformers
13
coreutils
13
org.springframework:spring-webmvc
13
craftcms/commerce
13
Umbraco.Cms
13
tribalsystems/zenario
13
github.com/containerd/containerd
13
helm.sh/helm/v3
13
com.thoughtworks.xstream:xstream
13
ghost
13
github.com/zitadel/zitadel
13
svelte
13
org.eclipse.jetty:jetty-server
13
forkcms/forkcms
13
wallabag/wallabag
12
OctoPrint
12
laravel/framework
12
simplesamlphp/simplesamlphp
12
lavalite/cms
12
github.com/rancher/rancher
12
github.com/openbao/openbao
12
roundup
12
undici
12
ec-cube/ec-cube
12
mlflow
12
@openzeppelin/contracts
12
phpoffice/phpspreadsheet
12
github.com/traefik/traefik
12
facturascripts/facturascripts
12
MessagePack
11
org.keycloak:keycloak-parent
11
cakephp/cakephp
11
nicegui
11
renovate
11
genix/cms
11
tinymce/tinymce
11
kubevirt.io/kubevirt
11
ckeditor4
11
ckan
11
@openzeppelin/contracts-upgradeable
11
zebrad
11
org.springframework:spring-webflux
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/TYPO3/typo3
63
https://github.com/microweber/microweber
63
https://github.com/apache/tomcat
60
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/django/django
50
https://github.com/usememos/memos
50
https://github.com/xwiki/xwiki-platform
50
https://github.com/rails/rails
46
https://github.com/keycloak/keycloak
45
https://github.com/thorsten/phpmyfaq
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/symfony/symfony
27
https://github.com/grafana/grafana
27
https://github.com/mautic/mautic
27
https://github.com/craftcms/cms
26
https://github.com/spring-projects/spring-framework
26
https://github.com/ansible/ansible
26
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/argoproj/argo-cd
24
https://github.com/directus/directus
24
https://github.com/shopware/shopware
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/magento/magento2
20
https://github.com/apache/activemq
20
https://github.com/firefly-iii/firefly-iii
20
https://github.com/snipe/snipe-it
20
https://github.com/plone/Products.CMFPlone
20
https://github.com/cilium/cilium
19
https://github.com/openstack/nova
18
https://github.com/contao/contao
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/apache/struts
17
https://github.com/ikus060/rdiffweb
16
https://github.com/matrix-org/synapse
16
https://github.com/shopware/platform
16
https://github.com/gradio-app/gradio
16
https://github.com/netty/netty
15
https://github.com/apache/cxf
15
https://github.com/CVEProject/cvelist
15
https://github.com/getkirby/kirby
15
https://github.com/vyperlang/vyper
15
https://github.com/OpenNMS/opennms
14
https://github.com/moby/moby
14
https://github.com/geoserver/geoserver
14
https://github.com/x-stream/xstream
14
https://github.com/tinymce/tinymce
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/baserproject/basercms
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/saltstack/salt
14
https://github.com/froxlor/froxlor
14
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/go-gitea/gitea
13
https://github.com/octobercms/october
13
https://github.com/containerd/containerd
13
https://github.com/strapi/strapi
13
https://github.com/openfga/openfga
13
https://github.com/apache/nifi
13
https://github.com/bcgit/bc-java
13
https://github.com/goharbor/harbor
13
https://github.com/PrestaShop/PrestaShop
13
https://github.com/rack/rack
13
https://github.com/huggingface/transformers
12
https://github.com/helm/helm
12
https://github.com/TYPO3-CMS/core
12
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/hashicorp/consul
12
https://github.com/openstack/keystone
12
https://github.com/traefik/traefik
12
https://github.com/vitejs/vite
11
https://github.com/laravel/framework
11
https://github.com/intelliants/subrion
11
https://github.com/apache/zeppelin
11
https://github.com/electron/electron
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/ethereum/go-ethereum
11
https://github.com/github/advisory-database
11
https://github.com/vaadin/platform
11
https://github.com/forkcms/forkcms
11
https://github.com/surrealdb/surrealdb
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/rancher/rancher
11
https://github.com/TryGhost/Ghost
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/backstage/backstage
10
https://github.com/laurent22/joplin
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/vercel/next.js
10
https://github.com/wallabag/wallabag
10
https://github.com/liufee/cms
10
https://github.com/vllm-project/vllm
10
https://github.com/decidim/decidim
10
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/greenpau/caddy-security
10
https://github.com/aio-libs/aiohttp
10
https://github.com/dotnet/runtime
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/opencast/opencast
9
https://github.com/jquery/jquery
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/urllib3/urllib3
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/puppetlabs/puppet
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/publify/publify
9
https://github.com/thorsten/phpMyFAQ
9
https://github.com/alkacon/opencms-core
9
https://github.com/getgrav/grav
8
https://github.com/opensearch-project/security
8
https://github.com/openbao/openbao
8
https://github.com/pyload/pyload
8
https://github.com/LavaLite/cms
8
https://github.com/ckan/ckan
8
https://github.com/gogs/gogs
8
https://github.com/hashicorp/nomad
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/openstack/glance
8
https://github.com/sulu/sulu
8
https://github.com/kubeedge/kubeedge
8
https://github.com/apache/superset
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/zendframework/zendframework
8
https://github.com/rubygems/rubygems
8
https://github.com/eclipse/jetty.project
8
https://github.com/dolibarr/dolibarr
8
https://github.com/pandao/editor.md
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/parse-community/parse-server
8
https://github.com/onionshare/onionshare
8
https://github.com/modoboa/modoboa
8
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/zitadel/zitadel
7
https://github.com/n8n-io/n8n
7
https://github.com/janeczku/calibre-web
7
https://github.com/nocodb/nocodb
7
https://github.com/scrapy/scrapy
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/denoland/deno
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/igniterealtime/Openfire
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/opencontainers/runc
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/opencv/opencv
7
https://github.com/Leantime/leantime
7
https://github.com/croogo/croogo
7
https://github.com/vaadin/flow
7
https://github.com/louislam/uptime-kuma
7
https://github.com/jupyter/notebook
7
https://github.com/kubevirt/kubevirt
7
https://github.com/treeverse/lakeFS
7
https://github.com/twbs/bootstrap
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/py-pdf/pypdf
7
https://github.com/python-pillow/Pillow
7
https://github.com/zenml-io/zenml
7
https://github.com/openstack/horizon
7
https://github.com/undertow-io/undertow
7
https://github.com/google/fscrypt
7
https://github.com/bagisto/bagisto
7
https://github.com/Sylius/Sylius
7
https://github.com/kevinpapst/kimai2
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/containers/podman
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/vega/vega
7
https://github.com/hashicorp/vault
7
https://github.com/nahsra/antisamy
7
https://github.com/modxcms/revolution
7
https://github.com/roundup-tracker/roundup
6
https://github.com/spatie/browsershot
6
https://github.com/owen2345/camaleon-cms
6
https://github.com/d4wner/Vulnerabilities-Report
6
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/jenkinsci/script-security-plugin
6
https://github.com/ezsystems/ezplatform-admin-ui
6
https://github.com/stacklok/minder
6
https://github.com/twisted/twisted
6
https://github.com/run-llama/llama_index
6
https://github.com/cui2shark/security
6