GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,249
Erlang
31
GitHub Actions
21
Go
2,018
Maven
5,000+
npm
3,723
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
857
Swift
36
Unreviewed advisories
All unreviewed
5,000+
23 advisories
Filter by severity
Refuel Autolab Eval Injection vulnerability
High
CVE-2024-27320
was published
for
refuel-autolabel
(pip)
Sep 12, 2024
Improper Neutralization of Formula Elements in a CSV File in html-2-csv
Moderate
CVE-2021-23654
was published
for
html-to-csv
(pip)
Nov 30, 2021
Refuel Autolab Eval Injection vulnerability
High
CVE-2024-27321
was published
for
refuel-autolabel
(pip)
Sep 12, 2024
CSV Injection in symfony/serializer
Moderate
CVE-2021-41270
was published
for
symfony/serializer
(Composer)
Nov 24, 2021
Potential CSV export data leak
High
CVE-2023-50448
was published
for
activeadmin
(RubyGems)
Dec 15, 2023
Duplicate Advisory: ActiveAdmin vulnerable to CSV injection
High
GHSA-rqxc-9p8h-xqgq
was published
for
activeadmin
(RubyGems)
Dec 24, 2023
•
withdrawn
ActiveAdmin CSV Injection leading to sensitive information disclosure
Moderate
CVE-2023-51763
was published
for
activeadmin
(RubyGems)
Dec 28, 2023
Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability
High
CVE-2023-3302
was published
for
admidio/admidio
(Composer)
Jun 23, 2023
RosarioSIS vulnerable to CSV Injection
Moderate
CVE-2023-29918
was published
for
francoisjacquet/rosariosis
(Composer)
May 2, 2023
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
High
CVE-2023-2629
was published
for
pimcore/customer-management-framework-bundle
(Composer)
May 11, 2023
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File vulnerability
High
CVE-2023-4006
was published
for
thorsten/phpmyfaq
(Composer)
Jul 31, 2023
CSV-Safe improperly filters special characters potentially leading to CSV injection
Critical
CVE-2022-28481
was published
for
csv-safe
(RubyGems)
May 3, 2022
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
Moderate
CVE-2021-37702
was published
for
pimcore/pimcore
(Composer)
Aug 30, 2021
CSV Injection Vulnerability
High
CVE-2021-41824
was published
for
craftcms/cms
(Composer)
Oct 18, 2021
Improper neutralization of formula elements in yii-helpers
High
CVE-2022-1544
was published
for
luyadev/yii-helpers
(Composer)
May 3, 2022
Arbitrary code execution in Magnolia CMS
High
CVE-2021-46363
was published
for
info.magnolia:magnolia-core
(Maven)
Feb 12, 2022
ghas-to-csv vulnerable to Improper Neutralization of Formula Elements in a CSV File
Moderate
CVE-2022-39217
was published
for
some-natalie/ghas-to-csv
(GitHub Actions)
Sep 16, 2022
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
High
CVE-2022-24770
was published
for
gradio
(pip)
Mar 18, 2022
Improper Neutralization of Formula Elements in a CSV File in Kimai 2
High
CVE-2021-43515
was published
for
kevinpapst/kimai2
(Composer)
Apr 9, 2022
CSV injection in Craft CMS
High
GHSA-xrpj-f9v6-2332
was published
for
craftcms/cms
(Composer)
Oct 4, 2021
•
withdrawn
CSV Injection vulnerability with exported contact lists in Mautic
Moderate
CVE-2018-8092
was published
for
mautic/core
(Composer)
Jan 19, 2021
ProTip!
Advisories are also available from the
GraphQL API