Browse Security Advisories
Critical Security Advisories for https://github.com/xwiki/xwiki-rendering from github Clear Filters
Critical
about 1 year ago
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
maven
org.xwiki.rendering:xwiki-rendering-transformation-macro
Critical
about 1 year ago
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
maven
org.xwiki.rendering:xwiki-rendering-syntax-xhtml
Critical
almost 3 years ago
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
maven
org.xwiki.rendering:xwiki-rendering-xml
Critical
over 3 years ago
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
maven
org.xwiki.platform:xwiki-platform-annotation-core, org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5, org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml, org.xwiki.rendering:xwiki-rendering-syntax-html5, org.xwiki.rendering:xwiki-rendering-syntax-html, org.xwiki.platform:xwiki-core-rendering-api, org.xwiki.rendering:xwiki-rendering-syntax-xhtml
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,083
Erlang Ecosystem Foundation
266
GitHub Advisory Database
35,120
Filter by Ecosystem
npm
1,417
maven
1,121
pypi
748
packagist
703
go
605
cargo
227
rubygems
137
nuget
89
actions
16
hex
10
swift
2
Filter by Package
magento/community-edition
47
vm2
32
dolibarr/dolibarr
27
flowise
26
com.liferay.portal:release.dxp.bom
24
n8n
24
com.fasterxml.jackson.core:jackson-databind
24
mlflow
23
net.mingsoft:ms-mcms
20
openclaw
20
org.jenkins-ci.main:jenkins-core
19
ci4-cms-erp/ci4ms
19
parse-server
17
salt
17
github.com/siyuan-note/siyuan/kernel
17
code.gitea.io/gitea
16
moodle/moodle
16
gogs.io/gogs
16
topthink/framework
15
org.apache.struts:struts2-core
14
flowise-components
14
PraisonAI
13
drupal/core
13
wwbn/avideo
13
org.apache.dubbo:dubbo
13
Django
12
org.xwiki.platform:xwiki-platform-oldcore
12
apache-airflow
12
github.com/rancher/rancher
12
praisonai
12
froxlor/froxlor
12
langchain
12
com.liferay.portal:release.portal.bom
11
magento/core
11
org.xwiki.platform:xwiki-platform-web-templates
10
@nyariv/sandboxjs
10
github.com/mattermost/mattermost-server
10
phpmyadmin/phpmyadmin
10
langflow
10
magento/project-community-edition
10
ansible
9
zebrad
9
funadmin/funadmin
9
vllm
9
praisonaiagents
9
mautic/core
9
craftcms/cms
9
drupal/drupal
9
pyload-ng
9
rdiffweb
8
fuxa-server
8
sequelize
8
org.xwiki.platform:xwiki-platform-administration-ui
8
symfony/symfony
8
golang.org/x/crypto
8
thorsten/phpmyfaq
8
@budibase/server
8
github.com/argoproj/argo-cd/v2
8
org.apache.tomcat.embed:tomcat-embed-core
7
github.com/argoproj/argo-cd
7
zendframework/zendframework1
7
github.com/mattermost/mattermost/server/v8
7
github.com/patrickhener/goshs
7
baserproject/basercms
7
rusqlite
7
electerm
7
shopware/platform
7
studio-42/elfinder
7
github.com/lxc/incus/v7/cmd/incusd
7
paddlepaddle
7
nilsteampassnet/teampass
6
org.jeecgframework.boot:jeecg-boot-common
6
github.com/grafana/grafana
6
org.apache.inlong:manager-pojo
6
org.apache.mina:mina-core
6
prestashop/prestashop
6
tensorflow
6
litellm
6
org.apache.shiro:shiro-core
6
praisonai-platform
6
typo3/cms
6
github.com/dgraph-io/dgraph/v25
6
codeigniter4/framework
6
org.yamcs:yamcs-core
6
langroid
6
aaptjs
6
@oneuptime/common
6
github.com/answerdev/answer
6
github.com/casdoor/casdoor
6
ezsystems/ezpublish-kernel
6
zendframework/zendframework
6
ruby-saml
6
picklescan
6
org.apache.tomcat:tomcat-catalina
6
pillow
6
mercurial
6
github.com/hashicorp/vault
6
ray
6
tensorflow-cpu
5
github.com/dgraph-io/dgraph
5
safe-eval
5
librenms/librenms
5
tensorflow-gpu
5
facturascripts/facturascripts
5
dbgpt
5
org.jenkins-ci.plugins:script-security
5
org.apache.openmeetings:openmeetings-parent
5
org.xwiki.commons:xwiki-commons-xml
5
Microsoft.ChakraCore
5
adodb/adodb-php
5
shopware/core
5
getgrav/grav
5
org.xwiki.platform:xwiki-platform-web
5
yeswiki/yeswiki
5
org.apache.tomcat:tomcat
5
pimcore/pimcore
5
steal
5
github.com/dgraph-io/dgraph/v24
5
ait-core
5
ai.h2o:h2o-core
5
centreon/centreon
5
nodebb
5
h2o
5
ckb
5
dompdf/dompdf
5
pgadmin4
5
executorch
5
sglang
5
org.jeecgframework.boot:jeecg-boot-parent
5
bentoml
5
crawl4ai
5
github.com/fission/fission
5
github.com/filebrowser/filebrowser/v2
5
9router
5
lollms
4
org.thymeleaf:thymeleaf-spring5
4
calibreweb
4
praisonai
4
github.com/pterodactyl/wings
4
org.xwiki.platform:xwiki-platform-flamingo-skin-resources
4
org.apache.inlong:manager-service
4
jsrsasign
4
@paperclipai/server
4
github.com/free5gc/nef
4
django
4
langchain-experimental
4
mongoose
4
safer-eval
4
cobbler
4
net.opentsdb:opentsdb
4
tribalsystems/zenario
4
swagger-ui
4
shopware/shopware
4
org.apache.tapestry:tapestry-core
4
org.cloudfoundry.identity:cloudfoundry-identity-server
4
messagepack-rs
4
org.xwiki.platform:xwiki-platform-appwithinminutes-ui
4
openssl-src
4
nokogiri
4
jsonata
4
mantisbt/mantisbt
4
nukeviet/nukeviet
4
aim
4
org.apache.ranger:ranger
4
github.com/usememos/memos
4
github.com/googleapis/mcp-toolbox
4
github.com/0xJacky/Nginx-UI
4
apache-airflow-providers-apache-hive
4
org.jeecgframework.boot:jeecg-boot-base-core
4
gradio
4
locutus
4
smallvec
4
org.apache.ignite:ignite-core
4
org.eclipse.jetty:jetty-server
4
github.com/kubev2v/migration-planner
4
github.com/Tencent/WeKnora
4
hermes-engine
4
org.apache.kylin:kylin-server-base
4
pagekit/pagekit
4
Pillow
4
showdoc/showdoc
4
org.apache.activemq:activemq-client
4
github.com/gofiber/fiber/v2
4
contao/contao
4
realms-shim
4
org.xwiki.platform:xwiki-platform-rest-server
4
io.undertow:undertow-core
4
org.xwiki.platform:xwiki-platform-search-ui
4
feehi/cms
4
ghost
4
nvflare
4
github.com/cosmos/ibc-go/v6
3
stigmem-node
3
publify_core
3
shell-quote
3
github.com/cosmos/ibc-go/v7
3
org.apache.inlong:manager-web
3
next-auth
3
motioneye
3
cockpit-hq/cockpit
3
Filter by Repository
https://github.com/xwiki/xwiki-platform
101
https://github.com/FasterXML/jackson-databind
24
https://github.com/jenkinsci/jenkins
18
https://github.com/apache/airflow
16
https://github.com/django/django
16
https://github.com/Dolibarr/dolibarr
15
https://github.com/mlflow/mlflow
14
https://github.com/saltstack/salt
13
https://github.com/langchain-ai/langchain
12
https://github.com/gogs/gogs
11
https://github.com/argoproj/argo-cd
11
https://github.com/ming-soft/MCMS
11
https://github.com/apache/struts
10
https://github.com/patriksimek/vm2
10
https://github.com/magento/magento2
10
https://github.com/apache/inlong
10
https://github.com/FlowiseAI/Flowise
10
https://github.com/funadmin/funadmin
9
https://github.com/top-think/framework
9
https://github.com/jeecgboot/jeecg-boot
9
https://github.com/PaddlePaddle/Paddle
9
https://github.com/python-pillow/Pillow
9
https://github.com/ikus060/rdiffweb
8
https://github.com/ansible/ansible
8
https://github.com/apache/tomcat
8
https://github.com/go-gitea/gitea
8
https://github.com/pyload/pyload
7
https://github.com/symfony/symfony
7
https://github.com/sequelize/sequelize
7
https://github.com/rancher/rancher
7
https://github.com/Studio-42/elFinder
7
https://github.com/parse-community/parse-server
7
https://github.com/rusqlite/rusqlite
7
https://github.com/run-llama/llama_index
7
https://github.com/tensorflow/tensorflow
6
https://github.com/shopware/platform
6
https://github.com/xwiki/xwiki-commons
6
https://github.com/answerdev/answer
6
https://github.com/shenzhim/aaptjs
6
https://github.com/dompdf/dompdf
6
https://github.com/thorsten/phpmyfaq
6
https://github.com/liferay/liferay-portal
6
https://github.com/grafana/grafana
5
https://github.com/PrestaShop/PrestaShop
5
https://github.com/spring-projects/spring-framework
5
https://github.com/hacksparrow/safe-eval
5
https://github.com/pytorch/executorch
5
https://github.com/apache/activemq
5
https://github.com/ADOdb/ADOdb
5
https://github.com/keycloak/keycloak
5
https://github.com/nervosnetwork/ckb
5
https://github.com/SAML-Toolkits/ruby-saml
5
https://github.com/NodeBB/NodeBB
5
https://github.com/auth0/auth0-PHP
5
https://github.com/dromara/hutool
5
https://github.com/moodle/moodle
5
https://github.com/craftcms/cms
5
https://github.com/stealjs/steal
5
https://github.com/froxlor/froxlor
5
https://github.com/vllm-project/vllm
5
https://github.com/twisted/twisted
5
https://github.com/usememos/memos
4
https://github.com/bentoml/BentoML
4
https://github.com/kubernetes/kubernetes
4
https://github.com/mautic/mautic
4
https://github.com/contao/contao
4
https://github.com/dataease/dataease
4
https://github.com/star7th/showdoc
4
https://github.com/servo/rust-smallvec
4
https://github.com/ezsystems/ezpublish-kernel
4
https://github.com/pippo-java/pippo
4
https://github.com/xwiki/xwiki-rendering
4
https://github.com/phpmyadmin/phpmyadmin
4
https://github.com/OpenTSDB/opentsdb
4
https://github.com/cloudfoundry/uaa
4
https://github.com/gradio-app/gradio
4
https://github.com/CVEProject/cvelist
4
https://github.com/swagger-api/swagger-ui
4
https://github.com/cobbler/cobbler
4
https://github.com/liufee/cms
4
https://github.com/ray-project/ray
4
https://github.com/hwchase17/langchain
4
https://github.com/otake84/messagepack-rs
4
https://github.com/nilsteampassnet/TeamPass
4
https://github.com/janeczku/calibre-web
4
https://github.com/actix/actix-web
3
https://github.com/neuvector/neuvector
3
https://github.com/andrewhickman/id-map
3
https://github.com/strapi/strapi
3
https://github.com/eosphoros-ai/DB-GPT
3
https://github.com/h2oai/h2o-3
3
https://github.com/neorazorx/facturascripts
3
https://github.com/NASA-AMMOS/AIT-Core
3
https://github.com/cosmos/ibc-go
3
https://github.com/ibexa/core
3
https://github.com/rails/rails
3
https://github.com/apache/dolphinscheduler
3
https://github.com/jbroadway/elefant
3
https://github.com/NVIDIA/NVFlare
3
https://github.com/octobercms/october
3
https://github.com/librenms/librenms
3
https://github.com/codeigniter4/CodeIgniter4
3
https://github.com/pytorch/pytorch
3
https://github.com/github/securitylab
3
https://github.com/centreon/centreon-archived
3
https://github.com/pimcore/pimcore
3
https://github.com/spring-projects/spring-security
3
https://github.com/apache/camel
3
https://github.com/denoland/deno
3
https://github.com/crewjam/saml
3
https://github.com/chaos-mesh/chaos-mesh
3
https://github.com/chakra-core/ChakraCore
3
https://github.com/modoboa/modoboa
3
https://github.com/yaml/pyyaml
3
https://github.com/Automattic/mongoose
3
https://github.com/TribalSystems/Zenario
3
https://github.com/facebook/hermes
3
https://github.com/apache/shiro
3
https://github.com/PHPMailer/PHPMailer
3
https://github.com/facade/ignition
3
https://github.com/thlorenz/browserify-shim
3
https://github.com/mmaitre314/picklescan
3
https://github.com/beego/beego
3
https://github.com/geoserver/geoserver
3
https://github.com/dwisiswant0/advisory
3
https://github.com/simpleledger/slpjs
3
https://github.com/pgadmin-org/pgadmin4
3
https://github.com/hazelcast/hazelcast
3
https://github.com/mbechler/marshalsec
3
https://github.com/opencast/opencast
3
https://github.com/sparklemotion/nokogiri
3
https://github.com/capricorn86/happy-dom
3
https://github.com/rubygems/rubygems.org
3
https://github.com/TeamSeri0us/pocs
3
https://github.com/baserproject/basercms
3
https://github.com/ImpressCMS/impresscms
3
https://github.com/vyperlang/vyper
3
https://github.com/anoma/namada
3
https://github.com/kjur/jsrsasign
3
https://github.com/LetianYuan/My-CVE-Public-References
3
https://github.com/publify/publify
3
https://github.com/mitmproxy/mitmproxy
3
https://github.com/shopware5/shopware
3
https://github.com/node-saml/xml-crypto
3
https://github.com/smarty-php/smarty
3
https://github.com/rubygems/rubygems
3
https://github.com/nukeviet/nukeviet
3
https://github.com/pterodactyl/wings
3
https://github.com/gofiber/fiber
3
https://github.com/pytorch/serve
3
https://github.com/jflyfox/jfinal_cms
3
https://github.com/feathersjs-ecosystem/feathers-sequelize
3
https://github.com/dexidp/dex
3
https://github.com/sqlalchemy/sqlalchemy
3
https://github.com/ezsystems/ezplatform-kernel
3
https://github.com/Agoric/realms-shim
2
https://github.com/apache/jmeter
2
https://github.com/russellhaering/gosaml2
2
https://github.com/vert-x3/vertx-web
2
https://github.com/keras-team/keras
2
https://github.com/openstack/python-keystoneclient
2
https://github.com/http4s/http4s
2
https://github.com/IceWhaleTech/CasaOS
2
https://github.com/jenkinsci/script-security-plugin
2
https://github.com/nats-io/jwt
2
https://github.com/dotnet/aspnetcore
2
https://github.com/simplesamlphp/simplesamlphp
2
https://github.com/reem/rust-traitobject
2
https://github.com/puma/puma
2
https://github.com/zendframework/zendframework
2
https://github.com/apache/dubbo
2
https://github.com/rohe/pysaml2
2
https://github.com/apache/hadoop
2
https://github.com/uasoft-indonesia/badaso
2
https://github.com/alextselegidis/easyappointments
2
https://github.com/Froxlor/Froxlor
2
https://github.com/PowerJob/PowerJob
2
https://github.com/geotools/geotools
2
https://github.com/Gerapy/Gerapy
2
https://github.com/rust-random/rand
2
https://github.com/semplon/GeniXCMS
2
https://github.com/cure53/DOMPurify
2
https://github.com/torrentpier/torrentpier
2
https://github.com/deepjavalibrary/djl
2
https://github.com/thepowersgang/stack_dst-rs
2
https://github.com/git-lfs/git-lfs
2
https://github.com/scalyr/scalyr-agent-2
2
https://github.com/apache/zeppelin
2
https://github.com/gardener/gardener
2
https://github.com/OpenMage/magento-lts
2
https://github.com/hashicorp/nomad
2
https://github.com/WWBN/AVideo
2
https://github.com/Ericsson/codechecker
2
https://github.com/unshiftio/url-parse
2
https://github.com/soketi/soketi
2
https://github.com/moby/buildkit
2
https://github.com/evmos/evmos
2
https://github.com/MrSwitch/hello.js
2
https://github.com/line/armeria
2