1,131 captures

14 Nov 2019 - 05 Feb 2026

Dec	JAN	Feb
	06
2021	2022	2023

success

fail

About this capture

COLLECTED BY

Organization: International Institute of Social History

Archive-It Partner 2236: International Institute of Social History

Collection: Social

Archive-It Partner 2236: International Institute of Social History - Collection 18400: Social

TIMESTAMPS

The Wayback Machine - http://web.archive.org/web/20220106140451/https://securitylab.github.com/ Back to GitHub.com

Security Lab Bounties Research Advisories Get Involved Events Home Bounties Research Advisories Get Involved Events GitHub Security Lab

Securing the world's software, together

GitHub Security Lab

Securing the world's software, together

GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on. Follow @GHSecurityLab

What we do

Find vulnerabilities Our researchers find and report new vulnerabilities in the open source projects everyone relies on. Educate the community

Educate the community We share our research through proof-of-concepts, articles, tutorials, conferences and community events. Amplify security research

Amplify security research We scale the security research of our community by performing Variants Analysis for open source projects with CodeQL. Notify the ecosystem

Notify the ecosystem We curate a database of CVEs and security advisories to notify open source developers and maintainers.

Our principles

Empower others Make securing open source easy for developers and maintainers. Foster collaboration

Foster collaboration Build a community of security researchers to serve the global open source community.

Vulnerabilities we've disclosed so far

Unsafe Deserialization in log4j2 - CVE-2021-45046 GHSL-2021-1054_GHSL-2021-1055 • CVE-2021-45046 • published 2021/12/22 00:00:00 ago • discovered by Alvaro Munoz Path traversal in Grafana REST API - CVE-2021-43813, CVE-2021-43815 GHSL-2021-1053 • CVE-2021-43813 • CVE-2021-43815 • published 2021/12/15 00:00:00 ago • discovered by Alvaro Munoz Cross-Site Scripting (XSS) in Mind-elixir - CVE-2021-32851 GHSL-2021-1047 • CVE-2021-32851 • published 2021/12/15 00:00:00 ago • discovered by securitylab Cross-Site Scripting (XSS) in jQuery MiniColors Plugin - CVE-2021-32850 GHSL-2021-1045 • CVE-2021-32850 • published 2021/12/15 00:00:00 ago • discovered by securitylab ReDoS (Regular Expression Denial of Service) in Solidus - CVE-2021-43805 GHSL-2021-099 • CVE-2021-43805 • published 2021/12/15 00:00:00 ago • discovered by securitylab See all disclosures shape

308 CVEs found by Security Lab researchers 185 since March 2020

Meet the team

Bas Alberts Debugging enthusiast

@anticomputer

@basalberts Joseph Katsioloudes Making security easy for developers

@jkcso

@jkcso Shelby Cunningham Security mostly, with privacy and retro if there's time.

@shelbyc

@shelbyc64 Hauwa Otori Operations and coalition builder for security research

@hauwaotori

@hauwaotori Man Yue Mo Security scavenger

@m-y-mo

@mmolgtm Robert Schultheis I read your CVEs

@rschultheis Antonio Morales EthicalHackerBugHunter & C++; 3735928559

@antonio-morales

@nosoynadiemas Jaroslav Lobacevski Security panda

@jarlob

@yarlob Jonathan Moroney Seeking safer software

@darakian

@Hooray_Darakian Xavier René-Corail 3-legged race organizer: Building bridges between Dev and Sec

@xcorail

@xcorail Nancy Gariché Community Building as Secure Code

@nanzggits Alvaro Munoz Hacking since 1970-01-01T00:00:00Z

@pwntester

@pwntester Kevin Backhouse Compilers, program analysis, security research

@kevinbackhouse

@kevin_backhouse Agustin Gianni Avoiding grep since 1999 AD

@agustingianni

@agustingianni shape

Join the effort

As a security researcher, your expertise is instrumental in securing the world’s software. Codify that knowledge as an expressive, executable, and repeatable CodeQL query that can be run on many codebases. Get rewarded for queries that have a positive impact on open source projects through our bounty program. See our bounties

Our latest research

●Fuzzing ●Apache HTTP ●CVE Fuzzing sockets: Apache HTTP, Part 3: Results December 21, 2021 ●Bounties Updates to the Bug Slayer bug bounty program December 15, 2021 ●CVE ●Security ●Exploit Getting root on Ubuntu through wishful thinking December 13, 2021 See all research

Product

●Features ●Security ●Enterprise ●Customer stories ●Pricing ●Resources

Platform

●Developer API ●Partners ●Atom ●Electron ●GitHub Desktop

Support

●Docs ●Community Forum ●Professional Services ●Learning Lab ●Status ●Contact GitHub