Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,535
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,515
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

3 advisories

Loading
Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source High
CVE-2025-52478 was published for n8n (npm) Aug 19, 2025
dana-gill Credited to dana-gill, pfelilpe, effective-waddle-e280aa15, ffaggiani, and LucianoSorrentino95 pfelilpe pfelilpe
effective-waddle-e280aa15 effective-waddle-e280aa15 ffaggiani ffaggiani LucianoSorrentino95 LucianoSorrentino95
n8n is vulnerable to Improper Authorization through its `/stop` endpoint Moderate
CVE-2025-52554 was published for n8n (npm) Jul 3, 2025
pfelilpe Credited to pfelilpe, MarcL, LucianoSorrentino95, effective-waddle-e280aa15, and ffaggiani MarcL MarcL
LucianoSorrentino95 LucianoSorrentino95 effective-waddle-e280aa15 effective-waddle-e280aa15 ffaggiani ffaggiani
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests Moderate
CVE-2025-49595 was published for n8n (npm) Jul 3, 2025
pfelilpe Credited to pfelilpe, LucianoSorrentino95, effective-waddle-e280aa15, ivov, and ffaggiani LucianoSorrentino95 LucianoSorrentino95
effective-waddle-e280aa15 effective-waddle-e280aa15 ivov ivov ffaggiani ffaggiani
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database