Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+

2,898 advisories

Loading
EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged... Critical Unreviewed
CVE-2024-11861 was published May 9, 2025
EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading... Critical Unreviewed
CVE-2024-12442 was published May 9, 2025
A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This... Moderate Unreviewed
CVE-2025-4454 was published May 9, 2025
A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This... Moderate Unreviewed
CVE-2025-4453 was published May 9, 2025
A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the... Moderate Unreviewed
CVE-2025-4445 was published May 9, 2025
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue... Moderate Unreviewed
CVE-2025-4443 was published May 9, 2025
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The... Moderate Unreviewed
CVE-2025-45798 was published May 8, 2025
An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute... Moderate Unreviewed
CVE-2025-44023 was published May 8, 2025
PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name,... Moderate Unreviewed
CVE-2023-51295 was published May 8, 2025
When running in Appliance mode, a command injection vulnerability exists in an undisclosed... High Unreviewed
CVE-2025-31644 was published May 8, 2025
HTML injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to... Moderate Unreviewed
CVE-2025-29154 was published May 7, 2025
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper... Moderate Unreviewed
CVE-2025-22476 was published May 6, 2025
An issue in the component /internals/functions of R-fx Networks Linux Malware Detect v1.6.5... Moderate Unreviewed
CVE-2025-26262 was published May 6, 2025
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-45487 was published May 6, 2025
Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the... Moderate Unreviewed
CVE-2025-45492 was published May 6, 2025
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-45488 was published May 6, 2025
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-45490 was published May 6, 2025
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the... Critical Unreviewed
CVE-2025-45491 was published May 6, 2025
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the... Moderate Unreviewed
CVE-2025-45489 was published May 6, 2025
goshs route not protected, allows command execution Critical
CVE-2025-46816 was published for github.com/patrickhener/goshs (Go) May 6, 2025
Guilhem7
Terraform WinDNS Provider improperly sanitizes input variables in `windns_record` Low
CVE-2025-46735 was published for github.com/nrkno/terraform-provider-windns (Go) May 6, 2025
polo-sec sjurtf
Foxboron
A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This... Moderate Unreviewed
CVE-2025-4357 was published May 6, 2025
A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This... High Unreviewed
CVE-2025-4349 was published May 6, 2025
A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This... High Unreviewed
CVE-2025-4350 was published May 6, 2025
A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by... Moderate Unreviewed
CVE-2025-4341 was published May 6, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database