GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,508
Erlang
33
GitHub Actions
25
Go
2,213
Maven
5,000+
npm
3,871
NuGet
696
pip
3,643
Pub
12
RubyGems
913
Rust
922
Swift
38
Unreviewed advisories
All unreviewed
5,000+
4,508 advisories
Filter by severity
Yeswiki Path Traversal vulnerability allows arbitrary read of files
High
CVE-2025-31131
was published
for
yeswiki/yeswiki
(Composer)
Apr 1, 2025
Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages
Moderate
CVE-2025-3057
was published
for
drupal/core
(Composer)
Apr 1, 2025
Drupal AI Vulnerable to OS Command Injection via Optional Automator Types
Moderate
CVE-2025-31692
was published
for
drupal/ai
(Composer)
Apr 1, 2025
Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability
Low
CVE-2025-31695
was published
for
drupal/link_field_display_mode_formatter
(Composer)
Apr 1, 2025
Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing
Low
CVE-2025-31694
was published
for
drupal/tfa
(Composer)
Apr 1, 2025
Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes
Low
CVE-2025-31697
was published
for
drupal/formatter_suite
(Composer)
Apr 1, 2025
Drupal RapiDoc OAS Field Formatter Cross-Site Scripting (XSS) vulnerability
Low
CVE-2025-31696
was published
for
drupal/rapidoc_elements_field_formatter
(Composer)
Apr 1, 2025
Drupal OAuth2 Server Missing Authorization vulnerability
Low
CVE-2025-31691
was published
for
drupal/oauth2_server
(Composer)
Apr 1, 2025
Drupal Open Social Missing Authorization vulnerability
Low
CVE-2025-31685
was published
for
goalgorilla/open_social
(Composer)
Apr 1, 2025
Drupal Open Social Missing Authorization vulnerability
Low
CVE-2025-31686
was published
for
goalgorilla/open_social
(Composer)
Apr 1, 2025
Drupal Google Tag Cross-Site Scripting (XSS) vulnerability
Moderate
CVE-2025-31682
was published
for
drupal/google_tag
(Composer)
Apr 1, 2025
Drupal Ignition Cross-Site Scripting (XSS) vulnerability
Moderate
CVE-2025-31679
was published
for
drupal/ignition
(Composer)
Apr 1, 2025
Drupal Matomo Analytics Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31680
was published
for
drupal/matomo
(Composer)
Apr 1, 2025
Drupal Authenticator Login Missing Authorization vulnerability
Moderate
CVE-2025-31681
was published
for
drupal/alogin
(Composer)
Apr 1, 2025
Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31689
was published
for
drupal/gdpr
(Composer)
Apr 1, 2025
Drupal Cache Utility Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31690
was published
for
drupal/cache_utility
(Composer)
Apr 1, 2025
Drupal SpamSpan Cross-Site Scripting (XSS) vulnerability
Low
CVE-2025-31687
was published
for
drupal/spamspan
(Composer)
Apr 1, 2025
Drupal Configuration Split Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31688
was published
for
drupal/config_split
(Composer)
Apr 1, 2025
Drupal AI Vulnerable to OS Command Injection
Moderate
CVE-2025-31693
was published
for
drupal/ai
(Composer)
Apr 1, 2025
Drupal Google Tag Cross-Site Request Forgery (CSRF)
Moderate
CVE-2025-31683
was published
for
drupal/google_tag
(Composer)
Apr 1, 2025
Drupal OAuth2 Client Cross-Site Request Forgery (CSRF)
Low
CVE-2025-31684
was published
for
drupal/oauth2_client
(Composer)
Apr 1, 2025
Drupal Core Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability
Moderate
CVE-2025-31674
was published
for
drupal/core
(Composer)
Apr 1, 2025
Drupal Core Cross-Site Scripting (XSS) Vulnerability
Low
CVE-2025-31675
was published
for
drupal/core
(Composer)
Apr 1, 2025
Drupal Core Vulnerable to Forceful Browsing
Moderate
CVE-2025-31673
was published
for
drupal/core
(Composer)
Apr 1, 2025
Drupal AI Cross-Site Request Forgery (CSRF) vulnerability
Low
CVE-2025-31677
was published
for
drupal/ai
(Composer)
Apr 1, 2025
ProTip!
Advisories are also available from the
GraphQL API