GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
Apache cxf-core: No restriction on attachment headers per message
High
CVE-2026-50645
was published
for
org.apache.cxf:cxf-core
(Maven)
Jun 12, 2026
Apache CXF has Improper Restriction of XML External Entity Reference
Critical
CVE-2026-49875
was published
for
org.apache.cxf:cxf-core
(Maven)
Jun 12, 2026
Uncontrolled Resource Consumption in Jackson-databind
High
CVE-2022-42003
was published
for
com.fasterxml.jackson.core:jackson-databind
(Maven)
Oct 3, 2022
Jettison parser crash by stackoverflow
Moderate
CVE-2022-40149
was published
for
org.codehaus.jettison:jettison
(Maven)
Sep 17, 2022
Improper Authentication in Apache WSS4J
Moderate
CVE-2014-3623
was published
for
org.apache.ws.security:wss4j
(Maven)
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API