Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

103,262 advisories

Loading
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-58788 was published Sep 5, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-58789 was published Sep 5, 2025
Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful... High Unreviewed
CVE-2025-58281 was published Sep 5, 2025
Race condition vulnerability in the audio module. Impact: Successful exploitation of this... High Unreviewed
CVE-2025-58296 was published Sep 5, 2025
Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful... High Unreviewed
CVE-2025-58280 was published Sep 5, 2025
RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows... High Unreviewed
CVE-2025-58400 was published Sep 5, 2025
The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in... High Unreviewed
CVE-2025-9990 was published Sep 5, 2025
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability High Unreviewed
CVE-2025-55238 was published Sep 5, 2025
In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an... High Unreviewed
CVE-2025-26431 was published Sep 4, 2025
In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a... High Unreviewed
CVE-2025-26439 was published Sep 4, 2025
In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a... High Unreviewed
CVE-2025-32322 was published Sep 4, 2025
In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP... High Unreviewed
CVE-2025-22414 was published Sep 4, 2025
In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the... High Unreviewed
CVE-2025-32350 was published Sep 4, 2025
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's... High Unreviewed
CVE-2025-32347 was published Sep 4, 2025
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM... High Unreviewed
CVE-2025-48522 was published Sep 4, 2025
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without... High Unreviewed
CVE-2025-48523 was published Sep 4, 2025
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a... High Unreviewed
CVE-2025-48531 was published Sep 4, 2025
In multiple locations, there is a possible one-time permission bypass due to a logic error in the... High Unreviewed
CVE-2025-48547 was published Sep 4, 2025
In multiple locations, there is a possible way to use apps linked from a context menu of a... High Unreviewed
CVE-2025-48533 was published Sep 4, 2025
In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the... High Unreviewed
CVE-2025-48532 was published Sep 4, 2025
In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio... High Unreviewed
CVE-2025-48548 was published Sep 4, 2025
In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent... High Unreviewed
CVE-2025-48558 was published Sep 4, 2025
In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay... High Unreviewed
CVE-2025-32349 was published Sep 4, 2025
In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to... High Unreviewed
CVE-2025-48563 was published Sep 4, 2025
In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device... High Unreviewed
CVE-2025-48553 was published Sep 4, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database