Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

13 advisories

Loading
The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics... Low Unreviewed
CVE-2013-2102 was published May 17, 2022
Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0... Low Unreviewed
CVE-2012-4572 was published May 17, 2022
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and... Moderate Unreviewed
CVE-2012-4529 was published May 17, 2022
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local... Low Unreviewed
CVE-2013-1921 was published May 17, 2022
Exposure of Sensitive Information to an Unauthorized Actor in JGroup Moderate
CVE-2013-4112 was published for org.jgroups:jgroups (Maven) May 17, 2022
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations... Moderate Unreviewed
CVE-2013-4128 was published May 17, 2022
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations... Moderate Unreviewed
CVE-2013-4213 was published May 17, 2022
Improper Authentication in Apache Tomcat Moderate
CVE-2013-2067 was published for org.apache.tomcat:tomcat (Maven) May 14, 2022
The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss... Moderate Unreviewed
CVE-2011-1096 was published May 13, 2022
Inadequate Encryption Strength in Apache CXF Moderate
CVE-2012-5575 was published for org.apache.cxf:cxf-rt-transports-http (Maven) May 13, 2022
Missing XML Validation in Apache CXF Moderate
CVE-2013-2160 was published for org.apache.cxf:cxf-rt-frontend-jaxrs (Maven) May 13, 2022
Inefficient Algorithmic Complexity in Apache Santuario XML Security Moderate
CVE-2013-2172 was published for org.apache.santuario:xmlsec (Maven) May 13, 2022
MarkLee131 Credited to MarkLee131
Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote... High Unreviewed
CVE-2013-1437 was published May 5, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database