Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,908
Erlang
39
GitHub Actions
38
Go
2,568
Maven
5,000+
npm
4,240
NuGet
754
pip
4,004
Pub
12
RubyGems
953
Rust
1,042
Swift
45
Unreviewed advisories
All unreviewed
5,000+

231 advisories

Loading
bagisto has CSV Formula Injection in Create New Product Critical
CVE-2025-62417 was published for bagisto/bagisto (Composer) Oct 16, 2025
kiwi865
Credited to kiwi865
An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System... Moderate Unreviewed
CVE-2025-11498 was published Oct 14, 2025
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is... Moderate Unreviewed
CVE-2025-11254 was published Oct 11, 2025
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a... Moderate Unreviewed
CVE-2025-35033 was published Sep 29, 2025
A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows... Critical Unreviewed
CVE-2025-56267 was published Sep 8, 2025
Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V (Artprima) AP... High Unreviewed
CVE-2025-58855 was published Sep 5, 2025
There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow... Moderate Unreviewed
CVE-2025-39245 was published Aug 29, 2025
UnoPim has CSV Injection on Quick Export feature Low
CVE-2025-55745 was published for unopim/unopim (Composer) Aug 22, 2025
sn1p3rt3s7
Credited to sn1p3rt3s7
CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file Moderate Unreviewed
CVE-2025-52386 was published Aug 13, 2025
The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up... Moderate Unreviewed
CVE-2025-8767 was published Aug 12, 2025
An issue was discovered in Archer Technology RSA Archer 6.11.00204.10014 allowing attackers to... High Unreviewed
CVE-2025-50572 was published Jul 31, 2025
Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product... Moderate Unreviewed
CVE-2025-54752 was published Jul 31, 2025
The Broken Link Notifier plugin for WordPress is vulnerable to CSV Injection in all versions up... Moderate Unreviewed
CVE-2025-6838 was published Jul 11, 2025
Data provided in a request performed to the server while activating a new device are put in a... Low Unreviewed
CVE-2025-1421 was published May 21, 2025
A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical.... Moderate Unreviewed
CVE-2025-4546 was published May 11, 2025
Apache Ranger Improper Neutralization of Formula Elements vulnerability Low
CVE-2024-55532 was published for org.apache.ranger:security-admin-web (Maven) Mar 3, 2025
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which... High Unreviewed
CVE-2023-51336 was published Feb 20, 2025
PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows... High Unreviewed
CVE-2023-51333 was published Feb 20, 2025
PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows... High Unreviewed
CVE-2023-51319 was published Feb 20, 2025
PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows... High Unreviewed
CVE-2023-51311 was published Feb 20, 2025
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows... Moderate Unreviewed
CVE-2023-51298 was published Feb 19, 2025
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an... High Unreviewed
CVE-2023-51302 was published Feb 19, 2025
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an... High Unreviewed
CVE-2024-45084 was published Feb 19, 2025
KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function. High Unreviewed
CVE-2023-46401 was published Jan 24, 2025
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function. Moderate Unreviewed
CVE-2023-46400 was published Jan 24, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database