GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
3,949 advisories
Filter by severity
composio Server-Side Request Forgery (SSRF) vulnerability
Moderate
CVE-2024-8952
was published
for
composio-core
(pip)
Mar 20, 2025
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
Moderate
CVE-2024-8955
was published
for
composio-core
(pip)
Mar 20, 2025
MLflow has a Local File Read/Path Traversal in dbfs
High
CVE-2024-8859
was published
for
mlflow
(pip)
Mar 20, 2025
Gradio DOS in multipart boundry while uploading the file
High
CVE-2024-8966
was published
for
gradio
(pip)
Mar 20, 2025
AgentScope arbitrary file download vulnerability in rpc_agent_client
High
CVE-2024-8501
was published
for
agentscope
(pip)
Mar 20, 2025
Aim path traversal in LockManager.release_locks
Critical
CVE-2024-8769
was published
for
aim
(pip)
Mar 20, 2025
AgentScope path traversal vulnerability
Critical
CVE-2024-8537
was published
for
agentscope
(pip)
Mar 20, 2025
AgentScope path traversal vulnerability in save-workflow
Critical
CVE-2024-8551
was published
for
agentscope
(pip)
Mar 20, 2025
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
High
CVE-2024-8487
was published
for
agentscope
(pip)
Mar 20, 2025
AgentScope Deserialization Vulnerability
Critical
CVE-2024-8502
was published
for
agentscope
(pip)
Mar 20, 2025
H2O Vulnerable to Arbitrary File Overwrite
High
CVE-2024-8616
was published
for
ai.h2o:h2o-core
(Maven)
Mar 20, 2025
AgentScope Path Traversal in /api/file
High
CVE-2024-8438
was published
for
agentscope
(pip)
Mar 20, 2025
AgentScope directory traversal vulnerability in /read-examples
High
CVE-2024-8524
was published
for
agentscope
(pip)
Mar 20, 2025
AgentScope stored cross-site scripting (XSS) vulnerability
Moderate
CVE-2024-8556
was published
for
agentscope
(pip)
Mar 20, 2025
Open WebUI denial of service through endpoint for converting markdown
High
CVE-2024-7983
was published
for
open-webui
(pip)
Mar 20, 2025
PyTorch Lightning denial of service vulnerability
High
CVE-2024-8020
was published
for
pytorch-lightning
(pip)
Mar 20, 2025
Gradio Vulnerable to Open Redirect
Moderate
CVE-2024-8021
was published
for
gradio
(pip)
Mar 20, 2025
Open WebUI stored cross-site scripting (XSS) vulnerability
High
CVE-2024-7990
was published
for
open-webui
(pip)
Mar 20, 2025
Aim allows denial of service due to no timeouts for some tracking server endpoints
High
CVE-2024-8061
was published
for
aim
(pip)
Mar 20, 2025
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
High
CVE-2024-8060
was published
for
open-webui
(pip)
Mar 20, 2025
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
High
CVE-2024-8183
was published
for
prefect
(pip)
Mar 20, 2025
Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
High
CVE-2024-8053
was published
for
open-webui
(pip)
Mar 20, 2025
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
High
CVE-2024-8062
was published
for
ai.h2o:h2o-core
(Maven)
Mar 20, 2025
Open WebUI Vulnerable to a Session Fixation Attack
High
CVE-2024-7053
was published
for
open-webui
(pip)
Mar 20, 2025
ProTip!
Advisories are also available from the
GraphQL API