GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
2,781 advisories
Filter by severity
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to...
High
Unreviewed
CVE-2025-48466
was published
Jun 26, 2025
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected...
Low
Unreviewed
CVE-2025-49549
was published
Jun 26, 2025
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected...
Moderate
Unreviewed
CVE-2025-49550
was published
Jun 26, 2025
Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege...
High
Unreviewed
CVE-2025-5822
was published
Jun 26, 2025
The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has...
Critical
Unreviewed
CVE-2025-53391
was published
Jun 29, 2025
Mattermost Incorrect Authorization vulnerability
Moderate
CVE-2025-47871
was published
for
github.com/mattermost/mattermost-server
(Go)
Jun 30, 2025
Mattermost Incorrect Authorization vulnerability
Moderate
CVE-2025-46702
was published
for
github.com/mattermost/mattermost-server
(Go)
Jun 30, 2025
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the...
Low
Unreviewed
CVE-2025-32462
was published
Jun 30, 2025
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly...
Low
Unreviewed
CVE-2025-0885
was published
Jul 3, 2025
The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1...
Critical
Unreviewed
CVE-2025-26850
was published
Jul 5, 2025
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform...
Moderate
Unreviewed
CVE-2025-20300
was published
Jul 7, 2025
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025...
Moderate
Unreviewed
CVE-2025-20999
was published
Jul 8, 2025
Cryptographic issue occurs due to use of insecure connection method while downloading.
Critical
Unreviewed
CVE-2025-21450
was published
Jul 8, 2025
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect...
High
Unreviewed
CVE-2025-49536
was published
Jul 8, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1...
Low
Unreviewed
CVE-2025-4972
was published
Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0...
Moderate
Unreviewed
CVE-2025-3396
was published
Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1...
Low
Unreviewed
CVE-2025-6168
was published
Jul 10, 2025
An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX...
Moderate
Unreviewed
CVE-2025-6549
was published
Jul 11, 2025
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
Critical
CVE-2025-53836
was published
for
org.xwiki.rendering:xwiki-rendering-transformation-macro
(Maven)
Jul 14, 2025
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...
Moderate
Unreviewed
CVE-2025-30747
was published
Jul 15, 2025
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that...
Low
Unreviewed
CVE-2025-30750
was published
Jul 15, 2025
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component:...
High
Unreviewed
CVE-2025-30744
was published
Jul 15, 2025
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite ...
High
Unreviewed
CVE-2025-30743
was published
Jul 15, 2025
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite ...
Moderate
Unreviewed
CVE-2025-30739
was published
Jul 15, 2025
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...
Moderate
Unreviewed
CVE-2025-30748
was published
Jul 15, 2025
ProTip!
Advisories are also available from the
GraphQL API