Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

1,329 advisories

Loading
The API is prone to XML external entity (XXE) injection. By default, XML external entity support... Moderate Unreviewed
CVE-2026-19614 was published Sep 8, 2026
Improper restriction of XML external entity reference vulnerability in Cosminexus Component... High Unreviewed
CVE-2026-71375 was published Sep 8, 2026
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted... High Unreviewed
CVE-2026-76958 was published Sep 8, 2026
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM... Moderate Unreviewed
CVE-2026-17444 was published Sep 4, 2026
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM... Moderate Unreviewed
CVE-2026-17443 was published Sep 4, 2026
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM... High Unreviewed
CVE-2026-81832 was published Sep 4, 2026
Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that... Moderate Unreviewed
CVE-2026-82525 was published Sep 3, 2026
XG VisionTerminal and XG-X VisionTerminal provided by Keyence Corporation improperly restrict XML... Moderate Unreviewed
CVE-2026-82918 was published Sep 3, 2026
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated... High Unreviewed
CVE-2026-17615 was published Aug 31, 2026
YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG,... High Unreviewed
CVE-2026-82880 was published Aug 31, 2026
MapFish Print has XXE that allows reading arbitrary files of certain types High
CVE-2026-55848 was published for org.mapfish.print:print-lib (Maven) Aug 28, 2026
zneek Credited to zneek
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an... High Unreviewed
CVE-2026-20320 was published Aug 19, 2026
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML... Moderate Unreviewed
CVE-2026-67268 was published Aug 19, 2026
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML... Moderate Unreviewed
CVE-2026-70423 was published Aug 19, 2026
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers Moderate Unreviewed
CVE-2026-75058 was published Aug 17, 2026
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE Moderate Unreviewed
CVE-2026-75055 was published Aug 17, 2026
Datavane TIS v5.0.0 contains an XML external entity (XXE) injection vulnerability that allows... High Unreviewed
CVE-2026-69101 was published Aug 14, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive... Moderate Unreviewed
CVE-2026-18715 was published Aug 13, 2026
In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE)... High Unreviewed
CVE-2026-15803 was published Aug 12, 2026
Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP... Moderate Unreviewed
CVE-2026-16999 was published Aug 12, 2026
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged... Moderate Unreviewed
CVE-2026-58248 was published Aug 11, 2026
Improper restriction of XML external entity reference vulnerability (unauthenticated) in... Critical Unreviewed
CVE-2026-16626 was published Aug 10, 2026
Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs... High Unreviewed
CVE-2026-65432 was published Aug 6, 2026
Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML... High Unreviewed
CVE-2026-70448 was published Aug 5, 2026
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML... High Unreviewed
CVE-2026-10025 was published Aug 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database