GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,748
Erlang
35
GitHub Actions
29
Go
2,321
Maven
5,000+
npm
3,955
NuGet
712
pip
3,736
Pub
12
RubyGems
921
Rust
972
Swift
38
Unreviewed advisories
All unreviewed
5,000+
269 advisories
Filter by severity
Symfony Service IDs Allow Injection
Critical
CVE-2019-10910
was published
for
symfony/dependency-injection
(Composer)
Nov 18, 2019
MantisBT SQL Injection via mc_project_get_users function
Moderate
CVE-2020-28413
was published
for
mantisbt/mantisbt
(Composer)
May 24, 2022
SQL injection in ADOdb PostgreSQL driver pg_insert_id() method
Critical
CVE-2025-46337
was published
for
adodb/adodb-php
(Composer)
May 1, 2025
Shopware Vulnerable to Blind SQL-injection in DAL aggregations
High
CVE-2025-27892
was published
for
shopware/core
(Composer)
Apr 8, 2025
Moodle has a SQL injection risk in course search module list filter
High
CVE-2025-26533
was published
for
moodle/moodle
(Composer)
Feb 24, 2025
Blind SQL Injection via GridFieldSortableHeader
High
CVE-2022-38148
was published
for
silverstripe/framework
(Composer)
Nov 22, 2022
MetalGenix GeniXCMS vulnerable to SQL Injection
Critical
CVE-2015-3933
was published
for
genix/cms
(Composer)
May 17, 2022
TeamPass vulnerable to SQL Injection
Critical
CVE-2015-7564
was published
for
nilsteampassnet/teampass
(Composer)
May 17, 2022
phpMyAdmin SQL injection in user accounts page
High
CVE-2020-5504
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 24, 2022
WEC Map (wec_map) extension for TYPO3 allows SQL Injection
High
CVE-2014-6295
was published
for
jbartels/wec-map
(Composer)
May 17, 2022
CoolURI extension for TYPO3 vulnerable to SQL Injection
High
CVE-2013-5322
was published
for
bednee/cooluri
(Composer)
May 17, 2022
News system (news) extension for TYPO3 vulnerable to SQL Injection
High
CVE-2013-4748
was published
for
georgringer/news
(Composer)
May 17, 2022
Multishop extension for TYPO3 has SQL Injection vulnerability
High
CVE-2013-4682
was published
for
bvbmedia/multishop
(Composer)
May 17, 2022
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Moderate
CVE-2011-4292
was published
for
moodle/moodle
(Composer)
May 13, 2022
TYPO3 SQL Injection vulnerability
Moderate
CVE-2010-5103
was published
for
typo3/cms
(Composer)
May 17, 2022
Webkit PDFs for TYPO3 has SQL Injection vulnerability
High
CVE-2010-4961
was published
for
dmk/webkitpdf
(Composer)
May 17, 2022
powermail extension for TYPO3 vulnerable to SQL Injection
High
CVE-2010-3604
was published
for
in2code/powermail
(Composer)
May 17, 2022
Moodle vulnerable to SQL injection
High
CVE-2010-1615
was published
for
moodle/moodle
(Composer)
May 13, 2022
Accessibility Glossary (a21glossary) SQL injection vulnerability
High
CVE-2009-4803
was published
for
svewap/a21glossary
(Composer)
May 2, 2022
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
High
CVE-2010-0329
was published
for
in2code/powermail
(Composer)
May 2, 2022
AdaptCMS SQL Injection vulnerability
High
CVE-2008-4524
was published
for
adaptcms/adaptcms
(Composer)
May 2, 2022
Joomla Framework Database Package Vulnerable to SQL Injection
Moderate
CVE-2025-25226
was published
for
joomla/database
(Composer)
Apr 8, 2025
Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Moderate
CVE-2025-27617
was published
for
pimcore/pimcore
(Composer)
Mar 11, 2025
SQL Injection in Funadmin
Critical
CVE-2023-24775
was published
for
funadmin/funadmin
(Composer)
Mar 7, 2023
Magento Open Source allows SQL Injection
Moderate
CVE-2023-38250
was published
for
magento/community-edition
(Composer)
Oct 13, 2023
ProTip!
Advisories are also available from the
GraphQL API