GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,039
Erlang
29
GitHub Actions
18
Go
1,864
Maven
5,000+
npm
3,587
NuGet
636
pip
3,176
Pub
10
RubyGems
852
Rust
805
Swift
34
Unreviewed advisories
All unreviewed
5,000+
148 advisories
Filter by severity
A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML...
Critical
Unreviewed
CVE-2024-37287
was published
Aug 13, 2024
Prototype pollution in izatop bunt
Critical
CVE-2024-38989
was published
for
@bunt/app
(npm)
Aug 12, 2024
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code...
Critical
Unreviewed
CVE-2024-39011
was published
Jul 30, 2024
Prototype Pollution in alykoshin mini-deep-assign v0.0.8 allows an attacker to execute arbitrary...
Critical
Unreviewed
CVE-2024-38983
was published
Jul 30, 2024
Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause...
Critical
Unreviewed
CVE-2024-36572
was published
Jul 30, 2024
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function...
Critical
Unreviewed
CVE-2024-39012
was published
Jul 30, 2024
Prototype Pollution in lukebond json-override 0.2.0 allows attackers to to execute arbitrary code...
Critical
Unreviewed
CVE-2024-38984
was published
Jul 30, 2024
chase-moskal snapstate v0.0.9 was discovered to contain a prototype pollution via the function...
Critical
Unreviewed
CVE-2024-39010
was published
Jul 30, 2024
ahilfoley cahil/utils v2.3.2 was discovered to contain a prototype pollution via the function set...
Critical
Unreviewed
CVE-2024-39014
was published
Jul 1, 2024
2o3t-utility v0.1.2 was discovered to contain a prototype pollution via the function extend. This...
Critical
Unreviewed
CVE-2024-39013
was published
Jul 1, 2024
Prototype pollution in ag-grid-community via the _.mergeDeep function
Critical
CVE-2024-38996
was published
for
ag-grid-community
(npm)
Jul 1, 2024
jsonic was discovered to contain a prototype pollution via the function empty.
Critical
CVE-2024-38993
was published
for
jsonic
(npm)
Jul 1, 2024
•
withdrawn
Blackprint @blackprint/engine Prototype Pollution issue
Critical
CVE-2024-24294
was published
for
@blackprint/engine
(npm)
May 20, 2024
@thi.ng/paths Prototype Pollution vulnerability
Critical
CVE-2024-29650
was published
for
@thi.ng/paths
(npm)
Mar 25, 2024
JSONata expression can pollute the "Object" prototype
Critical
CVE-2024-27307
was published
for
jsonata
(npm)
Mar 4, 2024
plotly.js prototype pollution vulnerability
Critical
CVE-2023-46308
was published
for
plotly.js
(Composer)
Jan 3, 2024
Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js...
Critical
Unreviewed
CVE-2023-1717
was published
Nov 1, 2023
Prototype Pollution in ali-security/mongoose
Critical
GHSA-rc4v-99cr-pjcm
was published
for
@seal-security/mongoose-fixed
(npm)
Oct 17, 2023
tree-kit Prototype Pollution vulnerability
Critical
CVE-2023-38894
was published
for
tree-kit
(npm)
Aug 17, 2023
MrSwitch hello.js vulnerable to prototype pollution
Critical
CVE-2021-26505
was published
for
hellojs
(npm)
Aug 11, 2023
The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability...
Critical
Unreviewed
CVE-2023-3186
was published
Jul 17, 2023
Mongoose Prototype Pollution vulnerability
Critical
CVE-2023-3696
was published
for
mongoose
(npm)
Jul 17, 2023
protobufjs Prototype Pollution vulnerability
Critical
CVE-2023-36665
was published
for
protobufjs
(npm)
Jul 5, 2023
Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
Critical
CVE-2023-36475
was published
for
parse-server
(npm)
Jun 30, 2023
ProTip!
Advisories are also available from the
GraphQL API