Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,464
Erlang
33
GitHub Actions
22
Go
2,163
Maven
5,000+
npm
3,821
NuGet
696
pip
3,502
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+

3,663 advisories

Loading
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass... High Unreviewed
CVE-2025-0813 was published Mar 12, 2025
Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover Moderate
GHSA-7j6w-p859-464f was published for froxlor/froxlor (Composer) Mar 11, 2025
halas98
Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries High
CVE-2025-27403 was published for github.com/ratify-project/ratify (Go) Mar 11, 2025
A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning... Critical Unreviewed
CVE-2024-56336 was published Mar 11, 2025
Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak Moderate
CVE-2025-0604 was published for org.keycloak:keycloak-ldap-federation (Maven) Mar 10, 2025
Improper Authentication vulnerability in GE Vernova EnerVista UR Setup allows Authentication... High Unreviewed
CVE-2025-27254 was published Mar 10, 2025
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin... High Unreviewed
CVE-2024-11087 was published Mar 8, 2025
The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up... Critical Unreviewed
CVE-2025-1475 was published Mar 7, 2025
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to... Moderate Unreviewed
CVE-2025-25452 was published Mar 6, 2025
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to... Moderate Unreviewed
CVE-2025-25450 was published Mar 6, 2025
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate... Moderate Unreviewed
CVE-2025-25451 was published Mar 6, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923... Critical Unreviewed
CVE-2025-27672 was published Mar 5, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368... Critical Unreviewed
CVE-2025-27641 was published Mar 5, 2025
Scanning certain QR codes that included text with a website URL could allow the URL to be opened... Moderate Unreviewed
CVE-2025-27425 was published Mar 4, 2025
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as... Low Unreviewed
CVE-2025-1880 was published Mar 3, 2025
MinIO allows an SFTP authentication bypass due to improperly trusted SSH key Moderate
CVE-2025-27414 was published for github.com/minio/minio (Go) Mar 3, 2025
donatello ston1th
While processing the authentication message in UE, improper authentication may lead to... Moderate Unreviewed
CVE-2024-38426 was published Mar 3, 2025
Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account... High Unreviewed
CVE-2025-1723 was published Mar 3, 2025
An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge... Critical Unreviewed
CVE-2025-23116 was published Mar 1, 2025
A vulnerability in the remote connection complements of the NVDA (Nonvisual Desktop Access) 2024... High Unreviewed
CVE-2025-26326 was published Feb 28, 2025
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login High
CVE-2025-23389 was published for github.com/rancher/rancher (Go) Feb 27, 2025
Navidrome allows an authentication bypass in Subsonic API with non-existent username Moderate
CVE-2025-27112 was published for github.com/navidrome/navidrome (Go) Feb 25, 2025
daniele-athome
A flaw in Gliffy results in broken authentication through the reset functionality of the... Moderate Unreviewed
CVE-2024-5174 was published Feb 24, 2025
A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary... High Unreviewed
CVE-2025-1024 was published Feb 19, 2025
The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and... Critical Unreviewed
CVE-2022-41545 was published Feb 18, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database