GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,986
Maven
5,000+
npm
3,703
NuGet
661
pip
3,328
Pub
11
RubyGems
884
Rust
843
Swift
36
Unreviewed advisories
All unreviewed
5,000+
404 advisories
Filter by severity
4thline cling uPnP protocol issue can lead to denial of service
High
CVE-2020-23622
was published
for
org.fourthline.cling:cling-core
(Maven)
Aug 16, 2022
mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.
High
Unreviewed
CVE-2022-29309
was published
May 25, 2022
The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was...
High
Unreviewed
CVE-2021-24150
was published
May 24, 2022
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender...
High
Unreviewed
CVE-2021-3553
was published
May 24, 2022
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4...
High
Unreviewed
CVE-2022-38931
was published
Sep 21, 2022
An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for...
High
Unreviewed
CVE-2021-43562
was published
May 24, 2022
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow...
High
Unreviewed
CVE-2021-29844
was published
May 24, 2022
A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could...
High
Unreviewed
CVE-2022-36451
was published
Oct 25, 2022
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index...
High
Unreviewed
CVE-2020-21649
was published
May 24, 2022
In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea...
High
Unreviewed
CVE-2021-39867
was published
May 24, 2022
There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118...
High
Unreviewed
CVE-2021-37104
was published
May 24, 2022
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can...
High
Unreviewed
CVE-2021-41587
was published
May 24, 2022
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can...
High
Unreviewed
CVE-2021-41586
was published
May 24, 2022
The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews...
High
Unreviewed
CVE-2021-33705
was published
May 24, 2022
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow...
High
Unreviewed
CVE-2021-28910
was published
May 24, 2022
On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users...
High
Unreviewed
CVE-2021-23029
was published
May 24, 2022
YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.
High
Unreviewed
CVE-2020-20341
was published
May 24, 2022
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...
High
Unreviewed
CVE-2021-22026
was published
May 24, 2022
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...
High
Unreviewed
CVE-2021-22027
was published
May 24, 2022
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion,...
High
Unreviewed
CVE-2020-14160
was published
May 24, 2022
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 /...
High
Unreviewed
CVE-2021-22726
was published
May 24, 2022
Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built...
High
Unreviewed
CVE-2021-31216
was published
May 24, 2022
SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server...
High
Unreviewed
CVE-2020-23079
was published
May 24, 2022
Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer...
High
Unreviewed
CVE-2020-24149
was published
May 24, 2022
A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1...
High
Unreviewed
CVE-2020-20582
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API