Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,001 advisories

Loading
Magento deserialization vulnerability Critical
CVE-2020-3716 was published for magento/community-edition (Composer) May 24, 2022
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java... Moderate Unreviewed
CVE-2020-2604 was published May 24, 2022
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching... High Unreviewed
CVE-2020-2555 was published May 24, 2022
Pivotal Spring Framework contains unsafe Java deserialization methods Critical
CVE-2016-1000027 was published for org.springframework:spring-web (Maven) May 24, 2022
bclozel
Credited to bclozel
An attacker who has already compromised the local system could use TinyWall Controller to gain... High Unreviewed
CVE-2019-19470 was published May 24, 2022
An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open... High Unreviewed
CVE-2019-19909 was published May 24, 2022
TYPO3 Insecure Deserialization in Query Generator & Query View High
CVE-2019-19849 was published for typo3/cms (Composer) May 24, 2022
A vulnerability has been identified in SPPA-T3000 Application Server (All versions). An attacker... Critical Unreviewed
CVE-2019-18316 was published May 24, 2022
A vulnerability has been identified in SPPA-T3000 Application Server (All versions). The... High Unreviewed
CVE-2019-18283 was published May 24, 2022
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization... High Unreviewed
CVE-2019-18935 was published May 24, 2022
Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of... Critical Unreviewed
CVE-2019-18580 was published May 24, 2022
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series... High Unreviewed
CVE-2019-15271 was published May 24, 2022
Magento 2 Community Edition RCE Vulnerability High
CVE-2019-8141 was published for magento/community-edition (Composer) May 24, 2022
The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3... Moderate Unreviewed
CVE-2019-18631 was published May 24, 2022
In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow... Critical Unreviewed
CVE-2019-18364 was published May 24, 2022
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data... High Unreviewed
CVE-2019-18601 was published May 24, 2022
A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON... Critical Unreviewed
CVE-2019-12017 was published May 24, 2022
Mulesoft Mule Unsafe Deserialization Critical
CVE-2019-13116 was published for org.mule.runtime:mule (Maven) May 24, 2022
Liferay Portal Allows RCE via Deserialization of a JSON Payload Critical
CVE-2019-16891 was published for com.liferay.portal:release.portal.bom (Maven) May 24, 2022
mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE... High Unreviewed
CVE-2019-17080 was published May 24, 2022
A vulnerability in the Java deserialization function used by Cisco Security Manager could allow... Critical Unreviewed
CVE-2019-12630 was published May 24, 2022
Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl Critical
CVE-2019-10202 was published for org.codehaus.jackson:jackson-mapper-asl (Maven) May 24, 2022
In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job... Moderate Unreviewed
CVE-2019-9373 was published May 24, 2022
A vulnerability was discovered in BMC MyIT Digital Workplace DWP before 18.11. The DWP component... Critical Unreviewed
CVE-2019-16755 was published May 24, 2022
download.php in inoERP 4.15 allows SQL injection through insecure deserialization. Critical Unreviewed
CVE-2019-16894 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database