Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,128
NuGet
735
pip
3,944
Pub
12
RubyGems
945
Rust
1,024
Swift
39
Unreviewed advisories
All unreviewed
5,000+

7,176 advisories

Loading
Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions ... Critical Unreviewed
CVE-2024-12718 was published Jun 3, 2025
A directory traversal vulnerability exists in the PVMP package unpacking functionality of... High Unreviewed
CVE-2025-31359 was published Jun 3, 2025
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in... Moderate Unreviewed
CVE-2025-41428 was published Jun 3, 2025
tar-fs can extract outside the specified dir with a specific tarball High
CVE-2025-48387 was published for tar-fs (npm) Jun 3, 2025
Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain... High Unreviewed
CVE-2025-27956 was published Jun 2, 2025
A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. Moderate Unreviewed
CVE-2025-37095 was published Jun 2, 2025
A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. Moderate Unreviewed
CVE-2025-37094 was published Jun 2, 2025
IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from... Moderate Unreviewed
CVE-2025-33004 was published Jun 1, 2025
A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This... Moderate Unreviewed
CVE-2025-5385 was published May 31, 2025
A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2.... Moderate Unreviewed
CVE-2025-5381 was published May 31, 2025
A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu... Moderate Unreviewed
CVE-2025-5380 was published May 31, 2025
The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,... High Unreviewed
CVE-2025-4857 was published May 31, 2025
A vulnerability was found in chshcms mccms 2.7. It has been declared as critical. This... Moderate Unreviewed
CVE-2025-5328 was published May 29, 2025
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse... Moderate Unreviewed
CVE-2024-51453 was published May 28, 2025
Traefik allows path traversal using url encoding Low
CVE-2025-47952 was published for github.com/traefik/traefik (Go) May 28, 2025
antonjanrutten
auth-js Vulnerable to Insecure Path Routing from Malformed User Input Low
CVE-2025-48370 was published for @supabase/auth-js (npm) May 27, 2025
kos0ng
In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution. Moderate Unreviewed
CVE-2025-48744 was published May 27, 2025
A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513.... Moderate Unreviewed
CVE-2025-5161 was published May 26, 2025
A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as... Moderate Unreviewed
CVE-2025-5159 was published May 26, 2025
A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to... Moderate Unreviewed
CVE-2025-5160 was published May 26, 2025
A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as... Moderate Unreviewed
CVE-2025-5158 was published May 26, 2025
A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as... Moderate Unreviewed
CVE-2025-5157 was published May 26, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-48273 was published May 23, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-47603 was published May 23, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-47535 was published May 23, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database