GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
10 advisories
Moodle context freezing
Moderate
CVE-2019-3852
was published
for
moodle/moodle
(Composer)
May 13, 2022
Moodle sensitive information disclosure
Moderate
CVE-2015-5340
was published
for
moodle/moodle
(Composer)
May 13, 2022
phpMyAdmin Denial Of Service (DOS) attack
High
CVE-2016-5706
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 14, 2022
Symfony Service IDs Allow Injection
Critical
CVE-2019-10910
was published
for
symfony/dependency-injection
(Composer)
Nov 18, 2019
Unsafe deserialization in SmtpTransport in CakePHP
High
CVE-2019-11458
was published
for
cakephp/cakephp
(Composer)
Dec 2, 2019
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
Low
CVE-2021-21265
was published
for
october/backend
(Composer)
Mar 10, 2021
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()
Moderate
CVE-2026-27016
was published
for
librenms/librenms
(Composer)
Feb 18, 2026
MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
Moderate
CVE-2025-12119
was published
for
mongodb/mongodb-extension
(Composer)
Nov 19, 2025
Admidio has an incomplete fix for CVE-2026-32812 (SSRF)
Moderate
CVE-2026-42194
was published
for
admidio/admidio
(Composer)
May 5, 2026
Froxlor has an incomplete fix for CVE-2026-30932
High
CVE-2026-41237
was published
for
froxlor/froxlor
(Composer)
May 29, 2026
ProTip!
Advisories are also available from the
GraphQL API