GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            11 advisories
        Filter by severity
        
      
      
    
                    
                      XXL-JOB vulnerable to Server-Side Request Forgery
                    
                      
  High
                    
                
                      
                        CVE-2024-24113
                      
                      was published
                        for
                        
                          com.xuxueli:xxl-job
                        
                        (Maven)
                      Feb 8, 2024 
                    
                  
                    
                      PowerJob vulnerable to incorrect access control
                    
                      
  Critical
                    
                
                      
                        CVE-2023-29924
                      
                      was published
                        for
                        
                          tech.powerjob:powerjob
                        
                        (Maven)
                      Apr 21, 2023 
                    
                  
                    
                      PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
                    
                      
  Moderate
                    
                
                      
                        CVE-2023-29922
                      
                      was published
                        for
                        
                          tech.powerjob:powerjob
                        
                        (Maven)
                      Apr 19, 2023 
                    
                  
                    
                      PowerJob Incorrect Access Control vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2023-29921
                      
                      was published
                        for
                        
                          tech.powerjob:powerjob
                        
                        (Maven)
                      Apr 19, 2023 
                    
                  
                    
                      RuoYi vulnerable to arbitrary file download
                    
                      
  High
                    
                
                      
                        CVE-2023-27025
                      
                      was published
                        for
                        
                          com.ruoyi:ruoyi
                        
                        (Maven)
                      Apr 2, 2023 
                    
                  
                    
                      Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-45208
                      
                      was published
                        for
                        
                          org.jeecgframework.boot:jeecg-module-system
                        
                        (Maven)
                      Nov 25, 2022 
                    
                  
                    
                      Jeecg-boot vulnerable to SQL Injection
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-45210
                      
                      was published
                        for
                        
                          org.jeecgframework.boot:jeecg-module-system
                        
                        (Maven)
                      Nov 25, 2022 
                    
                  
                    
                      Jeecg-boot vulnerable to SQL Injection
                    
                      
  Critical
                    
                
                      
                        CVE-2022-45206
                      
                      was published
                        for
                        
                          org.jeecgframework.boot:jeecg-module-system
                        
                        (Maven)
                      Nov 25, 2022 
                    
                  
                    
                      Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
                    
                      
  Critical
                    
                
                      
                        CVE-2022-45207
                      
                      was published
                        for
                        
                          org.jeecgframework.boot:jeecg-module-system
                        
                        (Maven)
                      Nov 25, 2022 
                    
                  
                    
                      XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)
                    
                      
  High
                    
                
                      
                        CVE-2022-43183
                      
                      was published
                        for
                        
                          com.xuxueli:xxl-job-core
                        
                        (Maven)
                      Nov 17, 2022 
                    
                  
                    
                      Cross-site Scripting in Nacos
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-44667
                      
                      was published
                        for
                        
                          com.alibaba.nacos:nacos-common
                        
                        (Maven)
                      Mar 12, 2022 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API