GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,081
Erlang
29
GitHub Actions
19
Go
1,909
Maven
5,000+
npm
3,642
NuGet
638
pip
3,258
Pub
10
RubyGems
869
Rust
820
Swift
35
Unreviewed advisories
All unreviewed
5,000+
70 advisories
Filter by severity
Powermail TYPO3 extension Broken Access Control in the OutputController
Moderate
CVE-2024-45233
was published
for
in2code/powermail
(Composer)
Aug 29, 2024
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Moderate
CVE-2024-42354
was published
for
shopware/core
(Composer)
Aug 8, 2024
Magento Open Source Improper Access Control vulnerability
Moderate
CVE-2024-34107
was published
for
magento/community-edition
(Composer)
Jun 13, 2024
FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass
Moderate
CVE-2024-38873
was published
for
studiomitte/friendlycaptcha
(Composer)
Jun 21, 2024
Moodle BigBlueButton web service leaks meeting joining information
Moderate
CVE-2024-38273
was published
for
moodle/moodle
(Composer)
Jun 18, 2024
Mediawiki tarball is missing .htaccess files
Moderate
CVE-2018-13258
was published
for
mediawiki/core
(Composer)
May 14, 2022
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
Moderate
CVE-2019-12470
was published
for
mediawiki/core
(Composer)
May 24, 2022
MediaWiki Incorrect Access Control vulnerability
Moderate
CVE-2019-12469
was published
for
mediawiki/core
(Composer)
May 24, 2022
MediaWiki Incorrect Access Control vulnerability
Moderate
CVE-2019-12467
was published
for
mediawiki/core
(Composer)
May 24, 2022
Contao Information Disclosure via Access Control Flaws
Moderate
CVE-2018-20028
was published
for
contao/contao
(Composer)
May 13, 2022
Moodle Ability to delete glossary entries that belong to another glossary
Moderate
CVE-2019-10187
was published
for
moodle/moodle
(Composer)
May 24, 2022
Moodle Improper Access Control
Moderate
CVE-2016-3729
was published
for
moodle/moodle
(Composer)
May 13, 2022
moodle Improper Access Control
Moderate
CVE-2019-10188
was published
for
moodle/moodle
(Composer)
May 24, 2022
moodle Improper Access Control
Moderate
CVE-2019-10189
was published
for
moodle/moodle
(Composer)
May 24, 2022
JetPack Exposure of Resource to Wrong Sphere
Moderate
CVE-2021-24374
was published
for
automattic/jetpack
(Composer)
May 24, 2022
OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass
Moderate
CVE-2024-30173
was published
for
causal/oidc
(Composer)
Apr 2, 2024
Improper Access Control in moodle
Moderate
CVE-2024-25981
was published
for
moodle/moodle
(Composer)
Feb 19, 2024
Improper Access Control in moodle
Moderate
CVE-2024-25980
was published
for
moodle/moodle
(Composer)
Feb 19, 2024
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
Moderate
CVE-2024-25120
was published
for
typo3/cms-core
(Composer)
Feb 13, 2024
derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module
Moderate
CVE-2024-24751
was published
for
derhansen/sf_event_mgt
(Composer)
Feb 13, 2024
Moodle Improper Access Control vulnerability
Moderate
CVE-2024-1439
was published
for
moodle/moodle
(Composer)
Feb 12, 2024
Symfony Incorrect Access Control
Moderate
CVE-2015-4050
was published
for
symfony/http-kernel
(Composer)
May 17, 2022
Moodle is vulnerable to unauthorized new accounts creation
Moderate
CVE-2010-1616
was published
for
moodle/moodle
(Composer)
May 13, 2022
Symfony Access Control Vulnerability
Moderate
CVE-2012-6432
was published
for
symfony/symfony
(Composer)
May 17, 2022
phpMyFAQ User Removal Page Allows Spoofing Of User Details
Moderate
CVE-2024-22202
was published
for
phpmyfaq/phpmyfaq
(Composer)
Feb 5, 2024
ProTip!
Advisories are also available from the
GraphQL API