Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,323 advisories

Loading
Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger... High Unreviewed
CVE-2026-88794 was published Oct 15, 2026
Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection... High Unreviewed
CVE-2026-109430 was published Oct 15, 2026
ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE')... High Unreviewed
CVE-2026-106616 was published Oct 13, 2026
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ... Critical Unreviewed
CVE-2026-90531 was published Oct 13, 2026
CVFS contained an XML external entity (XXE) reference handling issue affecting information... High Unreviewed
CVE-2026-77090 was published Oct 13, 2026
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker... High Unreviewed
CVE-2026-93891 was published Oct 13, 2026
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML... High Unreviewed
CVE-2026-85970 was published Oct 12, 2026
Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration... High Unreviewed
CVE-2026-85957 was published Oct 12, 2026
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML... High Unreviewed
CVE-2026-92877 was published Oct 12, 2026
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0... High Unreviewed
CVE-2026-14905 was published Oct 8, 2026
An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application... High Unreviewed
CVE-2026-102155 was published Oct 6, 2026
Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD... Moderate Unreviewed
CVE-2026-101893 was published Oct 5, 2026
Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution High
CVE-2026-61586 was published for eu.copernik:copernik-xml-factory (Maven) Oct 2, 2026
thientd Credited to thientd and gladiator9797 gladiator9797 gladiator9797
Improper Restriction of XML External Entity Reference in the XSLT support extension (camel... High Unreviewed
CVE-2026-88789 was published Oct 1, 2026
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog... High Unreviewed
CVE-2026-82386 was published Sep 28, 2026
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with... High Unreviewed
CVE-2026-82376 was published Sep 28, 2026
FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an... Moderate Unreviewed
CVE-2026-93030 was published Sep 25, 2026
http4s-scala-xml has an XML External Entity (XXE) processing issue Critical
CVE-2026-61741 was published for org.http4s:http4s-scala-xml_2.12 (Maven) Sep 24, 2026
rossabaker Credited to rossabaker and samspills samspills samspills
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain... High Unreviewed
CVE-2026-81536 was published Sep 24, 2026
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to... High Unreviewed
CVE-2026-18184 was published Sep 23, 2026
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to... High Unreviewed
CVE-2026-18172 was published Sep 23, 2026
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated... High Unreviewed
CVE-2026-17646 was published Sep 23, 2026
MPXJ: XXE Vulnerability in MerlinReader High
CVE-2026-61570 was published for MPXJ.Net (RubyGems) Sep 22, 2026
dyingman1 Credited to dyingman1
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array... High Unreviewed
CVE-2026-94108 was published Sep 20, 2026
A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote... Moderate Unreviewed
CVE-2026-76446 was published Sep 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database