GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,752
Maven
4,982
npm
3,516
NuGet
609
pip
3,090
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+
188 advisories
Filter by severity
The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and...
Moderate
Unreviewed
CVE-2023-5424
was published
Jun 7, 2024
IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to...
Moderate
Unreviewed
CVE-2024-28764
was published
May 1, 2024
Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export...
High
Unreviewed
CVE-2024-25007
was published
Apr 4, 2024
IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0...
High
Unreviewed
CVE-2023-35899
was published
Mar 21, 2024
A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7...
Critical
Unreviewed
CVE-2023-47534
was published
Mar 12, 2024
A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the ...
Moderate
Unreviewed
CVE-2023-45597
was published
Mar 5, 2024
An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a...
Moderate
Unreviewed
CVE-2023-47022
was published
Feb 6, 2024
The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in...
High
Unreviewed
CVE-2022-3604
was published
Jan 16, 2024
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (...
High
Unreviewed
CVE-2023-31295
was published
Dec 29, 2023
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (...
Moderate
Unreviewed
CVE-2023-31296
was published
Dec 29, 2023
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (...
High
Unreviewed
CVE-2023-31294
was published
Dec 29, 2023
ActiveAdmin CSV Injection leading to sensitive information disclosure
Moderate
CVE-2023-51763
was published
for
activeadmin
(RubyGems)
Dec 28, 2023
Duplicate Advisory: ActiveAdmin vulnerable to CSV injection
High
GHSA-rqxc-9p8h-xqgq
was published
for
activeadmin
(RubyGems)
Dec 24, 2023
•
withdrawn
Potential CSV export data leak
High
CVE-2023-50448
was published
for
activeadmin
(RubyGems)
Dec 15, 2023
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the...
High
Unreviewed
CVE-2023-48207
was published
Dec 7, 2023
IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote...
High
Unreviewed
CVE-2023-42004
was published
Nov 28, 2023
Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject...
High
Unreviewed
CVE-2023-48029
was published
Nov 17, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support...
High
Unreviewed
CVE-2023-25983
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to...
High
Unreviewed
CVE-2023-36527
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie...
High
Unreviewed
CVE-2023-23678
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder |...
Critical
Unreviewed
CVE-2023-23796
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue...
Critical
Unreviewed
CVE-2023-22719
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple...
High
Unreviewed
CVE-2022-45350
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP...
High
Unreviewed
CVE-2022-47442
was published
Nov 15, 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage...
Critical
Unreviewed
CVE-2022-45357
was published
Nov 13, 2023
ProTip!
Advisories are also available from the
GraphQL API