Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,150
NuGet
736
pip
3,952
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+

2,900 advisories

Loading
Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell... Moderate Unreviewed
CVE-2025-24333 was published Jul 2, 2025
A command injection remote code execution vulnerability exists in HPE StoreOnce Software. High Unreviewed
CVE-2025-37089 was published Jun 2, 2025
A command injection remote code execution vulnerability exists in HPE StoreOnce Software. High Unreviewed
CVE-2025-37096 was published Jun 2, 2025
A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this... Moderate Unreviewed
CVE-2025-7082 was published Jul 6, 2025
A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by... Moderate Unreviewed
CVE-2025-7081 was published Jul 6, 2025
A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This... Moderate Unreviewed
CVE-2025-7083 was published Jul 6, 2025
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u... Moderate Unreviewed
CVE-2025-7154 was published Jul 8, 2025
Node.js Sandbox MCP Server vulnerability can lead to Sandbox Escape via Command Injection High
CVE-2025-53372 was published for node-code-sandbox-mcp (npm) Jul 8, 2025
dellalibera
An authenticated command injection vulnerability exists in the Command line interface of HPE... High Unreviewed
CVE-2025-37102 was published Jul 8, 2025
MCP Server Kubernetes vulnerable to command injection in several tools High
CVE-2025-53355 was published for mcp-server-kubernetes (npm) Jul 8, 2025
dellalibera
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a... High Unreviewed
CVE-2023-33538 was published Jun 7, 2023
A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. This... Moderate Unreviewed
CVE-2025-7407 was published Jul 10, 2025
A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability... Moderate Unreviewed
CVE-2025-7414 was published Jul 10, 2025
An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2... Moderate Unreviewed
CVE-2025-51650 was published Jul 14, 2025
Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows... Critical Unreviewed
CVE-2025-3621 was published Jul 15, 2025
Liferay Portal vulnerable to arbitrary command injection Moderate
CVE-2011-1571 was published for com.liferay.portal:portal-service (Maven) May 13, 2022
Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and... Moderate Unreviewed
CVE-2025-52377 was published Jul 15, 2025
Successful exploitation of the vulnerability could allow an attacker with administrator... Low Unreviewed
CVE-2025-52687 was published Jul 16, 2025
Successful exploitation of the vulnerability could allow an attacker to inject commands with root... Critical Unreviewed
CVE-2025-52688 was published Jul 16, 2025
Successful exploitation of the vulnerability could allow an attacker to execute arbitrary... High Unreviewed
CVE-2025-52690 was published Jul 16, 2025
A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44.... Moderate Unreviewed
CVE-2025-1819 was published Mar 2, 2025
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the... Critical Unreviewed
CVE-2025-50756 was published Jul 14, 2025
A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This... Moderate Unreviewed
CVE-2025-7553 was published Jul 14, 2025
A vulnerability, which was classified as critical, has been found in Comodo Internet Security... High Unreviewed
CVE-2025-7097 was published Jul 7, 2025
@translated/lara-mcp vulnerable to command injection in import_tmx tool High
CVE-2025-53832 was published for @translated/lara-mcp (npm) Jul 21, 2025
dellalibera
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database