Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,464
Erlang
33
GitHub Actions
22
Go
2,163
Maven
5,000+
npm
3,821
NuGet
696
pip
3,502
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+

11,590 advisories

Loading
Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service... Low Unreviewed
CVE-2025-0883 was published Mar 12, 2025
Jenkins allows Cross-Site Scripting (XSS) Low
CVE-2012-0324 was published for org.jenkins-ci.main:jenkins-core (Maven) May 4, 2022
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928... Low Unreviewed
CVE-2024-13870 was published Mar 12, 2025
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi... Low Unreviewed
CVE-2025-24912 was published Mar 12, 2025
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache... Low Unreviewed
CVE-2025-26865 was published Mar 10, 2025
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This... Low Unreviewed
CVE-2025-0900 was published Mar 11, 2025
The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social... Low Unreviewed
CVE-2024-13615 was published Mar 11, 2025
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all... Low Unreviewed
CVE-2024-55592 was published Mar 11, 2025
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by... Low Unreviewed
CVE-2024-12546 was published Mar 11, 2025
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0... Low Unreviewed
CVE-2025-27398 was published Mar 11, 2025
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses (such... Low Unreviewed
CVE-2024-28607 was published Mar 11, 2025
In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation... Low Unreviewed
CVE-2025-27893 was published Mar 11, 2025
This issue was addressed by restricting options offered on a locked device. This issue is fixed... Low Unreviewed
CVE-2024-44179 was published Mar 10, 2025
The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an... Low Unreviewed
CVE-2025-27432 was published Mar 11, 2025
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain... Low Unreviewed
CVE-2024-41760 was published Mar 11, 2025
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center)... Low Unreviewed
CVE-2025-27430 was published Mar 11, 2025
SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user,... Low Unreviewed
CVE-2025-26655 was published Mar 11, 2025
Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and... Low Unreviewed
CVE-2025-27913 was published Mar 10, 2025
Duplicate Advisory: Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 Low
GHSA-5mwf-688x-mr7x was published for nokogiri (RubyGems) Feb 19, 2025 • withdrawn
Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 Low
GHSA-vvfq-8hwr-qm4m was published for nokogiri (RubyGems) Feb 18, 2025
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3... Low Unreviewed
CVE-2024-52905 was published Mar 10, 2025
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the... Low Unreviewed
CVE-2025-2153 was published Mar 10, 2025
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by... Low Unreviewed
CVE-2025-2149 was published Mar 10, 2025
A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by... Low Unreviewed
CVE-2025-2148 was published Mar 10, 2025
A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to... Low Unreviewed
CVE-2025-2122 was published Mar 9, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database