GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Graylog Allows Session Takeover via Insufficient HTML Sanitization
High
CVE-2025-46827
was published
for
org.graylog2:graylog2-server
(Maven)
May 7, 2025
Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
High
GHSA-q9q2-3ppx-mwqf
was published
for
org.graylog2:graylog2-server
(Maven)
May 7, 2025
Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
Moderate
CVE-2025-30373
was published
for
org.graylog2:graylog2-server
(Maven)
Apr 7, 2025
Graylog session fixation vulnerability through cookie injection
Moderate
CVE-2024-24823
was published
for
org.graylog2:graylog2-server
(Maven)
Feb 7, 2024
Graylog vulnerable to instantiation of arbitrary classes triggered by API request
High
CVE-2024-24824
was published
for
org.graylog2:graylog2-server
(Maven)
Feb 7, 2024
ProTip!
Advisories are also available from the
GraphQL API