GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,233
Erlang
31
GitHub Actions
20
Go
1,992
Maven
5,000+
npm
3,709
NuGet
661
pip
3,346
Pub
11
RubyGems
884
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+
106 advisories
Filter by severity
magento-lts Reset Password not protected against well-timed CSRF
Moderate
CVE-2021-21395
was published
for
openmage/magento-lts
(Composer)
Jan 26, 2023
CakePHP has incorrect Cross-Site Request Forgery validation
Moderate
GHSA-829q-v5g8-hhxc
was published
for
cakephp/cakephp
(Composer)
Jan 20, 2023
Froxlor vulnerable to Cross-Site Request Forgery
Moderate
CVE-2022-4867
was published
for
froxlor/froxlor
(Composer)
Dec 31, 2022
Cross-Site Request Forgery in Moodle
Moderate
CVE-2022-45149
was published
for
moodle/moodle
(Composer)
Nov 23, 2022
Cross-Site Request Forgery in feehi/feehicms
Moderate
CVE-2022-4014
was published
for
feehi/feehicms
(Composer)
Nov 16, 2022
ProcessWire vulnerable to Cross-Site Request Forgery
Moderate
CVE-2022-40488
was published
for
processwire/processwire
(Composer)
Oct 31, 2022
Froxlor vulnerable to Cross-Site Request Forgery (CSRF)
Moderate
CVE-2022-3017
was published
for
froxlor/froxlor
(Composer)
Aug 29, 2022
Kirby CMS 2.5.12 Cross-site Request Forgery
Moderate
CVE-2018-14519
was published
for
getkirby/cms
(Composer)
Aug 25, 2022
CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection
Moderate
CVE-2022-35943
was published
for
codeigniter4/shield
(Composer)
Aug 18, 2022
Microweber before v1.2.20 vulnerable to cross-site scripting
Moderate
CVE-2022-2353
was published
for
microweber/microweber
(Composer)
Jul 10, 2022
Cross-Site Request Forgery in easyii CMS
Moderate
CVE-2020-36534
was published
for
noumo/easyii
(Composer)
Jun 8, 2022
phpMyAdmin Cross-Site Request Forgery (CSRF)
Moderate
CVE-2019-12922
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 24, 2022
EC-CUBE Cross-site request forgery (CSRF) vulnerability
Moderate
CVE-2021-20842
was published
for
ec-cube/ec-cube
(Composer)
May 24, 2022
ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability
Moderate
CVE-2020-18151
was published
for
thinkcmf/thinkcmf
(Composer)
May 24, 2022
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API
Moderate
CVE-2021-21027
was published
for
magento/community-edition
(Composer)
May 24, 2022
PyroCMS Vulnerable to CSRF
Moderate
CVE-2020-25262
was published
for
pyrocms/pyrocms
(Composer)
May 24, 2022
NukeViet Cross-Site Request Forgery (CSRF)
Moderate
CVE-2020-13156
was published
for
nukeviet/nukeviet
(Composer)
May 24, 2022
NukeViet Cross-Site Request Forgery (CSRF)
Moderate
CVE-2020-13157
was published
for
nukeviet/nukeviet
(Composer)
May 24, 2022
Comments plugin Cross-Site Request Forgery (CSRF)
Moderate
CVE-2020-13868
was published
for
verbb/comments
(Composer)
May 24, 2022
phpBB Cross-Site Request Forgery (CSRF)
Moderate
CVE-2019-16107
was published
for
phpbb/phpbb
(Composer)
May 24, 2022
SilverStripe Denial of Service on flush and development URL tools
Moderate
CVE-2019-12246
was published
for
silverstripe/framework
(Composer)
May 24, 2022
phpBB Cross-Site Request Forgery (CSRF)
Moderate
CVE-2020-5501
was published
for
phpbb/phpbb
(Composer)
May 24, 2022
phpBB Cross-Site Request Forgery (CSRF)
Moderate
CVE-2019-13376
was published
for
phpbb/phpbb
(Composer)
May 24, 2022
Magento 2 Community Edition CSRF vulnerability
Moderate
CVE-2019-7947
was published
for
magento/community-edition
(Composer)
May 24, 2022
Magento 2 Community Edition XSS Vulnerability
Moderate
CVE-2019-7874
was published
for
magento/community-edition
(Composer)
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API