Browse Security Advisories
Low Security Advisories from github Clear Filters
Low
10 days ago
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
npm
hono
Low
10 days ago
Craft CMS: Incorrect path validation could potentially lead to path traversal
packagist
craftcms/cms
Low
10 days ago
Contao: Possible path traversal in job download URIs
packagist
contao/core-bundle, contao/contao
Low
10 days ago
Contao crawler leaks auth credentials to external hosts
packagist
contao/core-bundle, contao/contao
Low
11 days ago
Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing
go
github.com/traefik/traefik/v3
Low
11 days ago
rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect
go
github.com/rclone/rclone
Low
11 days ago
rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote
go
github.com/rclone/rclone
Low
11 days ago
rclone: Verbose Stack Trace Disclosure in RC API Error Responses
go
github.com/rclone/rclone
Low
12 days ago
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
npm
electron
Low
12 days ago
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
pypi
open-webui
Low
16 days ago
sigstore-go fails to check signature timestamps against a signing key's validity period
go
github.com/sigstore/sigstore-go
Low
16 days ago
@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header
npm
apostrophe
Low
18 days ago
MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
rubygems
msgpack
Low
19 days ago
ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal
rubygems
activerecord-tenanted
Low
19 days ago
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS
packagist
alextselegidis/easyappointments
Low
19 days ago
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync
packagist
alextselegidis/easyappointments
Low
19 days ago
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass
packagist
alextselegidis/easyappointments
Low
19 days ago
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network
packagist
alextselegidis/easyappointments
Low
19 days ago
@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
npm
@dynatrace-oss/dynatrace-mcp-server
Low
19 days ago
datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas
pypi
datamodel-code-generator
Low
19 days ago
Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape
go
github.com/fission/fission
Low
20 days ago
sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
rubygems
sqlite3, sqlite3-ruby
Low
20 days ago
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
rubygems
sqlite3, sqlite3-ruby
Low
23 days ago
Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics
cargo
hubuum_client
Low
24 days ago
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
pypi
open-webui
Low
24 days ago
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
pypi
open-webui
Low
24 days ago
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)
pypi
open-webui
Low
24 days ago
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
pypi
open-webui
Low
24 days ago
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
pypi, go, maven, nuget, npm
aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Low
24 days ago
ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
pypi
onnx
Low
24 days ago
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in ICON decoder when allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory leak in VIFF encoder when allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in MIFF encoder when allocaton fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in YUV decoder when opening of blob fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in TIFF encoder when an allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in hough lines operation when an operation fails
nuget
Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Information Disclosure when printing profiles with debug enabled
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Use-After-Free when freetype initialization fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Policy Bypass in script operation due to missing checks
nuget
Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
ImageMagick: Policy Bypass possible with matrix-backed operations
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
24 days ago
Ruby json: JSON generator heap buffer overflow when streaming to an IO
rubygems
json
Low
25 days ago
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
pypi
jupyterlab
Low
25 days ago
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
pypi
litellm
Low
25 days ago
Dompdf: File existence oracle via font-face stylesheet declaration
packagist
dompdf/dompdf
Low
26 days ago
Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons
rubygems
loofah
Low
26 days ago
Gitea: Webhook Authorization Header Returned in Plaintext via API
go
code.gitea.io/gitea
Low
26 days ago
Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
go
code.gitea.io/gitea
Low
26 days ago
Gitea: Private Repository Metadata Remains Accessible After Access Revocation
go
code.gitea.io/gitea
Low
26 days ago
Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
go
code.gitea.io/gitea
Low
26 days ago
Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim
go
code.gitea.io/gitea
Low
26 days ago
DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.
npm
dompurify
Low
27 days ago
Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references
rubygems
loofah
Low
27 days ago
@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped
npm
@astrojs/netlify
Low
27 days ago
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
npm
body-parser
Low
27 days ago
@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect
npm
@astrojs/node
Low
27 days ago
Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands
npm
astro
Low
27 days ago
File Browser: Share API exposes the password hash and bypass token
go
github.com/filebrowser/filebrowser/v2
Low
about 1 month ago
oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code
go
github.com/oapi-codegen/oapi-codegen/v2
Low
about 1 month ago
nimiq-primitives: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof
cargo
nimiq-primitives
Low
about 1 month ago
nimiq-primitives: Panic in TrieProof::verify via child_index unwrap on equal-length keys
cargo
nimiq-primitives
Low
about 1 month ago
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
go
github.com/stacklok/toolhive
Low
about 1 month ago
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway
go
github.com/stacklok/toolhive
Low
about 1 month ago
Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__
npm
@feathersjs/commons
Low
about 1 month ago
Wasmtime: Memory leak in C API with `externref` and `anyref` types
pypi, cargo
wasmtime-bin, wasmtime-c-api-impl
Low
about 1 month ago
FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=`
packagist
facturascripts/facturascripts
Low
about 1 month ago
Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values
hex
tesla
Low
about 1 month ago
Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param`
hex
tesla
Low
about 1 month ago
mint has potential CRLF injection in its HTTP request line via unvalidated `method`/`target`
hex
mint
Low
about 1 month ago
Craft CMS has authenticated path traversal in `assets/icon`, allowing local `.svg` file read
packagist
craftcms/cms
Low
about 1 month ago
rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path
cargo
rama
Low
about 1 month ago
Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection
packagist
web-auth/webauthn-lib
Low
about 1 month ago
Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows
npm
@better-auth/scim, better-auth
Low
about 1 month ago
netfoil: Attacker controlled data written to logs
go
github.com/tinfoil-factory/netfoil
Low
about 1 month ago
netfoil has a resource leak in LRU cache
go
github.com/tinfoil-factory/netfoil
Low
about 1 month ago
Django: cache middleware may expose private responses when unrelated request cookies are present
pypi
django
Low
about 1 month ago
mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)
cargo
uu_mknod
Low
about 1 month ago
Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
pypi
kiwitcms
Low
about 1 month ago
Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases
pypi
linuxfabrik-lib
Low
about 1 month ago
mkdir: -m exposes directory with umask perms before chmod (race window)
cargo
uu_mkdir
Low
about 1 month ago
id: pretty-print uses effective GID instead of effective UID for name lookup
cargo
uu_id
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,068
Erlang Ecosystem Foundation
171
GitHub Advisory Database
34,444
Filter by Ecosystem
pypi
715
nuget
681
packagist
485
npm
452
maven
448
go
421
cargo
265
rubygems
91
hex
14
swift
6
actions
3
pub
2
Filter by Package
tensorflow
105
tensorflow-cpu
101
tensorflow-gpu
96
openclaw
54
github.com/mattermost/mattermost/server/v8
48
Magick.NET-Q16-HDRI-AnyCPU
39
Magick.NET-Q16-HDRI-OpenMP-arm64
39
Magick.NET-Q16-AnyCPU
39
concrete5/concrete5
38
Magick.NET-Q16-HDRI-x64
38
Magick.NET-Q16-HDRI-arm64
37
Magick.NET-Q8-arm64
35
Magick.NET-Q16-OpenMP-arm64
35
Magick.NET-Q8-OpenMP-x64
35
Magick.NET-Q16-OpenMP-x64
35
Magick.NET-Q16-arm64
35
moodle/moodle
35
Magick.NET-Q8-OpenMP-arm64
35
Magick.NET-Q8-AnyCPU
34
Magick.NET-Q8-x64
34
Magick.NET-Q16-HDRI-x86
34
Magick.NET-Q16-x64
34
Magick.NET-Q8-x86
33
Magick.NET-Q16-x86
33
github.com/mattermost/mattermost-server
26
org.jenkins-ci.main:jenkins-core
20
org.keycloak:keycloak-services
18
aiohttp
17
magento/community-edition
17
shopware/platform
16
Magick.NET-Q16-HDRI-OpenMP-x64
16
wasmtime
13
typo3/cms
13
shopware/core
13
phpmyadmin/phpmyadmin
13
org.apache.tomcat:tomcat
12
vyper
12
craftcms/cms
12
org.opencms:opencms-core
11
symfony/symfony
11
magento/project-community-edition
11
parse-server
10
electron
10
nokogiri
10
undici
9
github.com/authzed/spicedb
9
code.gitea.io/gitea
9
open-webui
9
django
9
ethyca-fides
9
github.com/omec-project/amf
9
silverstripe/framework
8
Django
8
typo3/cms-core
8
next
8
nova
8
Magick.NET-Q16-OpenMP-x86
8
Umbraco.CMS
7
twig/twig
7
github.com/openbao/openbao
7
kimai/kimai
7
coreutils
6
actionpack
6
k8s.io/kubernetes
6
elliptic
6
github.com/cilium/cilium
6
puppet
6
openbabel
6
nocodb
6
microweber/microweber
6
langchain-chatchat
6
librenms/librenms
6
vantage6
5
astro
5
ansible
5
gradio
5
go.etcd.io/etcd/v3
5
weblate
5
github.com/authelia/authelia/v4
5
github.com/opentofu/opentofu
5
dolibarr/dolibarr
5
torch
5
baserproject/basercms
5
sweetalert2
5
drupal/core
5
github.com/mattermost/mattermost-server/v6
5
org.apache.tomcat:tomcat-catalina
5
apache-airflow
5
helm.sh/helm/v3
5
rails-html-sanitizer
5
cryptography
5
october/backend
5
rack
5
october/system
5
hono
4
shopware/shopware
4
zenml
4
pretix
4
funadmin/funadmin
4
org.apache.tomcat.embed:tomcat-embed-core
4
aws-cdk-lib
4
loofah
4
github.com/hashicorp/vault
4
contao/core-bundle
4
com.vaadin:flow-server
4
dompurify
4
nuxt
4
com.xuxueli:xxl-job-admin
4
alextselegidis/easyappointments
4
better-auth
4
nautobot
4
admidio/admidio
4
simplesamlphp/simplesamlphp
4
github.com/mattermost/mattermost
4
sudo-rs
4
mattermost-desktop
4
solspace/craft-freeform
4
ch.qos.logback:logback-core
4
vllm
3
justhtml
3
cargo
3
sqlite3-ruby
3
ckb
3
github.com/cosmos/cosmos-sdk
3
node-forge
3
snipe/snipe-it
3
symfony/ux-live-component
3
directus
3
github.com/docker/docker
3
com.vaadin:vaadin-bom
3
Weblate
3
matrix-synapse
3
mineadmin/mineadmin
3
apostrophe
3
keystone
3
@sveltejs/kit
3
github.com/grafana/grafana
3
hermes-agent
3
statamic/cms
3
@keystone-6/core
3
risc0-zkvm
3
typo3/cms-install
3
go.temporal.io/server
3
python-multipart
3
symfony/yaml
3
kiwitcms
3
github.com/nhost/nhost
3
GDAL
3
org.graylog2:graylog2-server
3
github.com/canonical/lxd
3
langchain
3
helm.sh/helm
3
bin-links
3
surrealdb
3
metagpt
3
pterodactyl/panel
3
hackney
3
github.com/rclone/rclone
3
langflow
3
angular
3
org.opensearch.plugin:opensearch-security
3
@grackle-ai/server
3
Umbraco.Forms
3
pypdf
3
org.apache.hive:hive-service
3
go.etcd.io/etcd
3
ciguard
3
yungifez/skuul
3
craftcms/commerce
3
typo3/cms-backend
3
devalue
3
sqlite3
3
copyparty
3
org.apache.hive:hive
3
AstrBot
3
redaxo/source
3
passenger
3
concurrent-ruby
2
net.mingsoft:ms-mcms
2
MaterialX
2
go.etcd.io/etcd/client/v3
2
guarddog
2
homeassistant
2
github.com/mutagen-io/mutagen
2
typo3/cms-frontend
2
winter/wn-backend-module
2
Flask-Security-Too
2
unhead
2
ezsystems/ezpublish-kernel
2
risc0-circuit-rv32im
2
drupal/drupal
2
github.com/yoanbernabeu/grepai
2
com.inedo.proget:inedo-proget
2
tools.devnull:build-notifications
2
rustls-webpki
2
sequoia-openpgp
2
vite
2
github.com/traefik/traefik/v3
2
org.apache.hadoop:hadoop-common
2
shescape
2
Filter by Repository
https://github.com/tensorflow/tensorflow
105
https://github.com/moodle/moodle
19
https://github.com/mattermost/mattermost
15
https://github.com/concretecms/concretecms
14
https://github.com/shopware/platform
12
https://github.com/TYPO3/typo3
12
https://github.com/vyperlang/vyper
12
https://github.com/openstack/nova
10
https://github.com/octobercms/october
10
https://github.com/alkacon/opencms-core
9
https://github.com/bytecodealliance/wasmtime
9
https://github.com/ethyca/fides
9
https://github.com/jenkinsci/jenkins
8
https://github.com/apache/tomcat
8
https://github.com/liferay/liferay-portal
8
https://github.com/etcd-io/etcd
8
https://github.com/umbraco/Umbraco-CMS
8
https://github.com/keycloak/keycloak
8
https://github.com/eclipse/jetty.project
7
https://github.com/nodejs/undici
7
https://github.com/kubernetes/kubernetes
7
https://github.com/symfony/symfony
7
https://github.com/phpmyadmin/phpmyadmin
7
https://github.com/xwiki/xwiki-platform
7
https://github.com/shopware/shopware
7
https://github.com/cilium/cilium
6
https://github.com/rails/rails
6
https://github.com/apache/airflow
6
https://github.com/ansible/ansible
6
https://github.com/VulnSageAgent/PoCs
6
https://github.com/vantage6/vantage6
6
https://github.com/puppetlabs/puppet
5
https://github.com/silverstripe/silverstripe-framework
5
https://github.com/WeblateOrg/weblate
5
https://github.com/baserproject/basercms
5
https://github.com/vercel/next.js
5
https://github.com/sweetalert2/sweetalert2
5
https://github.com/helm/helm
5
https://github.com/indutny/elliptic
5
https://github.com/rack/rack
5
https://github.com/rails/rails-html-sanitizer
5
https://github.com/ImageMagick/ImageMagick
5
https://github.com/wintercms/winter
4
https://github.com/pyca/cryptography
4
https://github.com/authzed/spicedb
4
https://github.com/simplesamlphp/simplesamlphp
4
https://github.com/librenms/librenms
4
https://github.com/electron/electron
4
https://github.com/vaadin/platform
4
https://github.com/digitalbazaar/forge
3
https://github.com/denoland/deno
3
https://github.com/chatchat-space/Langchain-Chatchat
3
https://github.com/aio-libs/aiohttp
3
https://github.com/aws/aws-cdk
3
https://github.com/zenml-io/zenml
3
https://github.com/risc0/risc0
3
https://github.com/vaadin/flow
3
https://github.com/Byron/gitoxide
3
https://github.com/cosmos/cosmos-sdk
3
https://gitlab.com/sequoia-pgp/sequoia
3
https://github.com/surrealdb/surrealdb
3
https://github.com/twigphp/Twig
3
https://github.com/CVEProject/cvelist
3
https://github.com/moby/moby
3
https://github.com/nervosnetwork/ckb
3
https://github.com/django/django
3
https://github.com/nautobot/nautobot
3
https://github.com/Graylog2/graylog2-server
3
https://github.com/cometbft/cometbft
3
https://github.com/matrix-org/synapse
3
https://github.com/directus/directus
3
https://github.com/sparklemotion/nokogiri
3
https://sourceforge.net/projects/phpmyadmin.sourceforge.net
3
https://github.com/phusion/passenger
3
https://github.com/bcgit/bc-java
3
https://github.com/canonical/lxd
3
https://github.com/jenkinsci/ec2-plugin
2
https://github.com/Upsonic/Upsonic
2
https://github.com/huggingface/transformers
2
https://github.com/schokokeksorg/freewvs
2
https://github.com/apache/activemq
2
https://github.com/goharbor/harbor
2
https://github.com/opentofu/opentofu
2
https://github.com/Leantime/leantime
2
https://github.com/opencontainers/runc
2
https://github.com/apollographql/apollo-server
2
https://github.com/aws/s2n-tls
2
https://github.com/trifectatechfoundation/sudo-rs
2
https://github.com/expressjs/serve-static
2
https://github.com/authelia/authelia
2
https://github.com/containers/podman
2
https://github.com/microweber/microweber
2
https://github.com/GilaCMS/gila
2
https://github.com/apache/incubator-seata
2
https://github.com/mutagen-io/mutagen
2
https://github.com/dfns/cggmp21
2
https://github.com/answerdev/answer
2
https://github.com/agnaistic/agnai
2
https://github.com/hashicorp/nomad
2
https://github.com/eslint/rewrite
2
https://github.com/vllm-project/vllm
2
https://github.com/Dolibarr/dolibarr
2
https://github.com/DataDog/guarddog
2
https://github.com/wagtail/wagtail
2
https://github.com/gradio-app/gradio
2
https://github.com/Alexhuszagh/rust-lexical
2
https://github.com/tokio-rs/tokio
2
https://github.com/matrix-org/matrix-appservice-irc
2
https://github.com/dnnsoftware/Dnn.Platform
2
https://github.com/umbraco/Umbraco.Forms.Issues
2
https://github.com/dpgaspar/Flask-AppBuilder
2
https://github.com/opencontainers/distribution-spec
2
https://github.com/mautic/mautic
2
https://github.com/opencast/opencast
2
https://github.com/ChainSafe/lodestar
2
https://github.com/ericcornelissen/shescape
2
https://github.com/eladnava/mailgen
2
https://github.com/expressjs/express
2
https://github.com/dani-garcia/vaultwarden
2
https://github.com/keystonejs/keystone
2
https://github.com/parse-community/parse-server
2
https://github.com/sveltejs/kit
2
https://github.com/Sylius/Sylius
2
https://github.com/dbt-labs/dbt-core
2
https://github.com/openstack/keystone
2
https://github.com/Cyber-Wo0dy/report
2
https://github.com/1Panel-dev/1Panel
2
https://github.com/Flask-Middleware/flask-security
2
https://github.com/vitejs/vite
2
https://github.com/sigstore/cosign
2
https://github.com/traefik/traefik
2
https://github.com/apache/druid
2
https://github.com/openstack/horizon
2
https://github.com/quarkusio/quarkus
2
https://github.com/octoprint/octoprint
2
https://github.com/ceph/ceph-deploy
2
https://github.com/containerd/containerd
2
https://github.com/Exiv2/exiv2
2
https://github.com/AcademySoftwareFoundation/MaterialX
2
https://github.com/craftcms/cms
2
https://github.com/benoitc/hackney
2
https://github.com/YesWiki/yeswiki
2
https://github.com/zopefoundation/Zope
2
https://github.com/nextauthjs/next-auth
2
https://github.com/RIAEvangelist/node-ipc
2
https://github.com/statamic/cms
2
https://github.com/powsybl/powsybl-core
2
https://github.com/ShenxiuSec/cve-proofs
2
https://github.com/aws/s2n-quic
2
https://github.com/ezsystems/ezplatform-kernel
2
https://github.com/saltstack/salt
2
https://github.com/langchain-ai/langchain
2
https://github.com/firefly-iii/firefly-iii
2
https://github.com/Ackites/KillWxapkg
2
https://github.com/xuxueli/xxl-job
2
https://github.com/apache/kylin
2
https://github.com/nats-io/nats-server
2
https://github.com/rust-lang/cargo
2
https://github.com/theupdateframework/python-tuf
2
https://github.com/knative-extensions/eventing-github
1
https://github.com/reactiveui/refit
1
https://github.com/fastify/fastify-http-proxy
1
https://github.com/ezsystems/ezpublish-kernel
1
https://github.com/dojo/dijit
1
https://github.com/joeferner/redis-commander
1
https://github.com/ckeditor/ckeditor5
1
https://github.com/tinymce/tinymce
1
https://github.com/unopim/unopim
1
https://github.com/tickbh/ProcessLock
1
https://github.com/codelibs/fess
1
https://github.com/swagger-api/swagger-codegen
1
https://github.com/PrestaShop/productcomments
1
https://github.com/NVIDIA/NeMo
1
https://github.com/lobehub/lobe-chat
1
https://github.com/Azure/setup-kubectl
1
https://github.com/ktorio/ktor
1
https://github.com/snowflakedb/snowflake-jdbc
1
https://github.com/brefphp/bref
1
https://github.com/misskey-dev/summaly
1
https://github.com/vapor/postgres-nio
1
https://github.com/jquery-validation/jquery-validation
1
https://github.com/electron-userland/electron-packager
1
https://github.com/pglombardo/PasswordPusher
1
https://github.com/backstage/backstage
1
https://github.com/FractalFir/memory_pages
1
https://github.com/auth0/laravel-auth0
1
https://github.com/mudler/LocalAI
1
https://github.com/spinacms/spina
1
https://github.com/SickChill/sickchill
1
https://github.com/decidim/decidim
1
https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID
1
https://github.com/jenkinsci/qmetry-for-jira-test-management-plugin
1
https://github.com/notaryproject/notation-go
1
https://github.com/gwenn/lemon-rs
1
https://github.com/jenkinsci/email-ext-plugin
1
https://github.com/CosmWasm/wasmd
1
https://github.com/rails/globalid
1
https://github.com/medikoo/es5-ext
1
https://github.com/moq/moq
1