Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,788
Maven
5,000+
npm
5,000+
NuGet
1,124
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,576
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
20

14 advisories

Loading
Withdrawn Advisory: HTML injections in BTCPayServer High
CVE-2023-0493 was published for BTCPayServer.Client (NuGet) Jan 27, 2023 • withdrawn
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver... Moderate Unreviewed
CVE-2023-1149 was published Mar 2, 2023
An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding... Moderate Unreviewed
CVE-2024-21600 was published Jan 12, 2024
This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a... Low Unreviewed
CVE-2024-1221 was published Mar 14, 2024
This vulnerability allows an already authenticated admin user to create a malicious payload that... High Unreviewed
CVE-2024-1882 was published Mar 14, 2024
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server.... Moderate Unreviewed
CVE-2024-1883 was published Mar 14, 2024
LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint Critical
CVE-2024-2952 was published for litellm (pip) Apr 10, 2024
ishaan-jaff Credited to ishaan-jaff, r3kumar, and cookesan r3kumar r3kumar
cookesan cookesan
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata Critical
CVE-2024-34359 was published for llama-cpp-python (pip) May 13, 2024
retr0reg Credited to retr0reg
parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an... High Unreviewed
CVE-2024-4897 was published Jul 2, 2024
When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection... High Unreviewed
CVE-2026-11311 was published Jun 17, 2026
When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress... High Unreviewed
CVE-2026-55723 was published Jul 15, 2026
dssrf has an SSRF bypass with remove_at_symbol_in_string High
CVE-2026-54722 was published for dssrf (npm) Jul 30, 2026
HackingRepo Credited to HackingRepo and andrewmkhoury andrewmkhoury andrewmkhoury
Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an... High Unreviewed
CVE-2026-66362 was published Sep 2, 2026
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability... High Unreviewed
CVE-2026-77180 was published Sep 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database