GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,779
Erlang
36
GitHub Actions
29
Go
2,338
Maven
5,000+
npm
3,972
NuGet
714
pip
3,769
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
765 advisories
Filter by severity
IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15
is vulnerable to an XML external...
High
Unreviewed
CVE-2025-36049
was published
Jun 18, 2025
Keyoti SearchUnit prior to 9.0.0. is vulnerable to XML External Entity (XXE). An attacker who can...
High
Unreviewed
CVE-2025-44044
was published
Jun 10, 2025
Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon...
Critical
Unreviewed
CVE-2025-31039
was published
Jun 9, 2025
Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration...
Moderate
Unreviewed
CVE-2025-4338
was published
May 23, 2025
XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This...
High
Unreviewed
CVE-2025-27523
was published
May 15, 2025
CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method...
High
Unreviewed
CVE-2025-4639
was published
May 14, 2025
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All...
High
Unreviewed
CVE-2024-51445
was published
May 13, 2025
The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated...
High
Unreviewed
CVE-2025-30018
was published
May 13, 2025
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE)...
Critical
Unreviewed
CVE-2025-2776
was published
May 7, 2025
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE)...
Critical
Unreviewed
CVE-2025-2777
was published
May 7, 2025
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE)...
Critical
Unreviewed
CVE-2025-2775
was published
May 7, 2025
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper...
High
Unreviewed
CVE-2025-22478
was published
May 6, 2025
GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An...
Moderate
Unreviewed
CVE-2025-34490
was published
Apr 28, 2025
An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary...
Moderate
Unreviewed
CVE-2025-2070
was published
Apr 25, 2025
Overview
XML documents optionally contain a Document Type Definition (DTD), which, among...
Moderate
Unreviewed
CVE-2025-24910
was published
Apr 17, 2025
Overview
XML documents optionally contain a Document Type Definition (DTD), which, among...
Moderate
Unreviewed
CVE-2025-24911
was published
Apr 17, 2025
An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1...
Moderate
Unreviewed
CVE-2025-32406
was published
Apr 8, 2025
Improper Restriction of XML External Entity Reference vulnerability in supsystic Easy Google Maps...
Moderate
Unreviewed
CVE-2025-32138
was published
Apr 4, 2025
In JetBrains GoLand before 2025.1 an XXE during debugging was possible
Moderate
Unreviewed
CVE-2025-29932
was published
Mar 25, 2025
Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows...
Moderate
Unreviewed
CVE-2025-25036
was published
Mar 21, 2025
IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE...
High
Unreviewed
CVE-2025-0162
was published
Mar 7, 2025
External XML entity injection allows arbitrary download of files. The
score without least...
Moderate
Unreviewed
CVE-2025-24521
was published
Mar 5, 2025
IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity...
High
Unreviewed
CVE-2024-49781
was published
Feb 20, 2025
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to...
High
Unreviewed
CVE-2023-47160
was published
Feb 19, 2025
RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a...
Moderate
Unreviewed
CVE-2024-25066
was published
Feb 17, 2025
ProTip!
Advisories are also available from the
GraphQL API