Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,344
Erlang
31
GitHub Actions
22
Go
2,112
Maven
5,000+
npm
3,767
NuGet
680
pip
3,454
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

475 advisories

Loading
XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component... High Unreviewed
CVE-2021-1630 was published May 24, 2022
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7... High Unreviewed
CVE-2021-22523 was published May 24, 2022
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data... High Unreviewed
CVE-2019-3752 was published May 24, 2022
Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air... High Unreviewed
CVE-2021-20595 was published May 24, 2022
An XML External Entity (XXE) issue exists in Kaseya VSA before 9.5.6. High Unreviewed
CVE-2021-30201 was published May 24, 2022
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack... High Unreviewed
CVE-2020-4300 was published May 24, 2022
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack... High Unreviewed
CVE-2019-4730 was published May 24, 2022
IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML... High Unreviewed
CVE-2021-20492 was published May 24, 2022
XXE vulnerability in Jenkins URLTrigger Plugin High
CVE-2021-21659 was published for org.jenkins-ci.plugins:urltrigger (Maven) May 24, 2022
NotMyFault
XXE vulnerability in Jenkins Filesystem Trigger Plugin High
CVE-2021-21657 was published for org.jenkins-ci.plugins:fstrigger (Maven) May 24, 2022
NotMyFault
Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity... High Unreviewed
CVE-2021-22140 was published May 24, 2022
In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure. High Unreviewed
CVE-2021-30006 was published May 24, 2022
A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server... High Unreviewed
CVE-2021-1530 was published May 24, 2022
IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when... High Unreviewed
CVE-2020-5013 was published May 24, 2022
A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager... High Unreviewed
CVE-2021-29140 was published May 24, 2022
A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform... High Unreviewed
CVE-2021-25165 was published May 24, 2022
An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox... High Unreviewed
CVE-2020-7037 was published May 24, 2022
A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform... High Unreviewed
CVE-2021-25163 was published May 24, 2022
XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin High
CVE-2021-21642 was published for org.jenkins-ci.plugins:config-file-provider (Maven) May 24, 2022
NotMyFault
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity... High Unreviewed
CVE-2021-20454 was published May 24, 2022
IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity... High Unreviewed
CVE-2021-20453 was published May 24, 2022
Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input,... High Unreviewed
CVE-2020-6590 was published May 24, 2022
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML... High Unreviewed
CVE-2021-22158 was published May 24, 2022
IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity... High Unreviewed
CVE-2021-20482 was published May 24, 2022
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when... High Unreviewed
CVE-2021-20502 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database