Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
1,998
Maven
5,000+
npm
3,710
NuGet
661
pip
3,364
Pub
11
RubyGems
885
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+

31 advisories

Loading
Cross-site Scripting in xain Moderate
CVE-2018-20302 was published for xain (Erlang) Apr 12, 2022
Phoenix Arbitrary URL Redirect Moderate
CVE-2017-1000163 was published for phoenix (Erlang) Apr 12, 2022
XSS in HEEx class attributes Moderate
GHSA-j3gg-r6gp-95q2 was published for phoenix_html (Erlang) Apr 12, 2022
Missing `is_nil` requirement Moderate
GHSA-2xxx-fhc8-9qvq was published for ecto (Erlang) Apr 12, 2022
Remote Code Execution in paginator Critical
CVE-2020-15150 was published for paginator (Erlang) Apr 12, 2022
p-
Permissive parameters and privilege escalation Moderate
CVE-2018-20301 was published for coherence (Erlang) Feb 10, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database