GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
111 advisories
Filter by severity
In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability (Formula...
High
Unreviewed
CVE-2022-22121
was published
Jan 11, 2022
CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a...
High
Unreviewed
CVE-2022-22689
was published
Feb 11, 2022
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a...
High
Unreviewed
CVE-2021-39022
was published
Mar 11, 2022
RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx...
High
Unreviewed
CVE-2022-23868
was published
Mar 31, 2022
Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an...
High
Unreviewed
CVE-2021-43257
was published
Apr 15, 2022
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all...
High
Unreviewed
CVE-2021-23286
was published
Apr 19, 2022
Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page...
High
Unreviewed
CVE-2022-29315
was published
Apr 20, 2022
A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user...
High
Unreviewed
CVE-2018-10257
was published
May 13, 2022
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with...
High
Unreviewed
CVE-2018-10258
was published
May 13, 2022
A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a...
High
Unreviewed
CVE-2018-10255
was published
May 13, 2022
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.
High
Unreviewed
CVE-2018-10504
was published
May 13, 2022
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is...
High
Unreviewed
CVE-2018-11525
was published
May 13, 2022
The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable...
High
Unreviewed
CVE-2018-11526
was published
May 13, 2022
The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection.
High
Unreviewed
CVE-2018-15571
was published
May 13, 2022
OPSWAT MetaDefender before v4.11.2 allows CSV injection.
High
Unreviewed
CVE-2018-16275
was published
May 13, 2022
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.
High
Unreviewed
CVE-2018-16308
was published
May 13, 2022
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.
High
Unreviewed
CVE-2018-16651
was published
May 13, 2022
IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the...
High
Unreviewed
CVE-2018-1774
was published
May 13, 2022
Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection...
High
Unreviewed
CVE-2018-7304
was published
May 13, 2022
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...
High
Unreviewed
CVE-2018-9106
was published
May 13, 2022
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...
High
Unreviewed
CVE-2018-9107
was published
May 13, 2022
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2...
High
Unreviewed
CVE-2019-4071
was published
May 24, 2022
The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it...
High
Unreviewed
CVE-2019-11872
was published
May 24, 2022
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...
High
Unreviewed
CVE-2019-12134
was published
May 24, 2022
** DISPUTED ** In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists,...
High
Unreviewed
CVE-2019-14352
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API