GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
8 advisories
October CMS Vulnerable to Stored XSS via Branding Styles
Moderate
CVE-2025-61676
was published
for
october/system
(Composer)
Jan 9, 2026
October CMS Vulnerable to Stored XSS via Editor and Branding Styles
Moderate
CVE-2025-61674
was published
for
october/system
(Composer)
Jan 9, 2026
Withdrawn Advisory: October Cross-site Scripting vulnerability
Moderate
CVE-2023-43876
was published
for
october/cms
(Composer)
Sep 28, 2023
•
withdrawn
October CMS Safe Mode bypass leads to authenticated Remote Code Execution
High
CVE-2022-35944
was published
for
october/system
(Composer)
Oct 13, 2022
October CMS - RainLab Blog Plugin XSS
Moderate
CVE-2018-7198
was published
for
rainlab/blog-plugin
(Composer)
May 13, 2022
October CMS File Upload Vulnerability
Critical
CVE-2017-1000194
was published
for
october/october
(Composer)
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API