Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+

111,564 advisories

Loading
TkEasyGUI Affected by Uncontrolled Search Path Element Issue High
CVE-2025-55671 was published for TkEasyGUI (pip) Sep 5, 2025
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module High
CVE-2022-42121 was published for com.liferay.portal:release.dxp.bom (Maven) Nov 15, 2022
Inefficient Regular Expression Complexity in Liferay Portal High
CVE-2022-42124 was published for com.liferay.portal:release.portal.bom (Maven) Nov 15, 2022
Path Traversal in Liferay Portal High
CVE-2022-42123 was published for com.liferay.portal:release.portal.bom (Maven) Nov 15, 2022
In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP... High Unreviewed
CVE-2025-22414 was published Sep 4, 2025
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a... High Unreviewed
CVE-2025-48531 was published Sep 4, 2025
In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the... High Unreviewed
CVE-2025-32350 was published Sep 4, 2025
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent... High Unreviewed
CVE-2025-32321 was published Sep 4, 2025
In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to... High Unreviewed
CVE-2025-32327 was published Sep 4, 2025
In multiple locations, there is a possible way to read files belonging to other apps due to SQL... High Unreviewed
CVE-2025-48544 was published Sep 4, 2025
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without... High Unreviewed
CVE-2025-48523 was published Sep 4, 2025
In multiple locations, there is a possible way to use apps linked from a context menu of a... High Unreviewed
CVE-2025-48533 was published Sep 4, 2025
In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible... High Unreviewed
CVE-2025-22441 was published Sep 4, 2025
In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent... High Unreviewed
CVE-2025-32326 was published Sep 4, 2025
In getCallingAppName of Shared.java, there is a possible way to trick users into granting file... High Unreviewed
CVE-2025-32323 was published Sep 4, 2025
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer... High Unreviewed
CVE-2025-32325 was published Sep 4, 2025
In multiple locations, there is a possible condition that results in OOB accesses due to an... High Unreviewed
CVE-2025-48530 was published Sep 4, 2025
In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch... High Unreviewed
CVE-2025-32324 was published Sep 4, 2025
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer... High Unreviewed
CVE-2024-49714 was published Sep 4, 2025
In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay... High Unreviewed
CVE-2025-32349 was published Sep 4, 2025
In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to... High Unreviewed
CVE-2025-26454 was published Sep 4, 2025
An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of... High Unreviewed
CVE-2024-47853 was published Aug 26, 2025
An information disclosure vulnerability exists in the Vault API functionality of ClearML... High Unreviewed
CVE-2024-43779 was published Feb 6, 2025
In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write... High Unreviewed
CVE-2025-36906 was published Sep 4, 2025
On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against... High Unreviewed
CVE-2025-9709 was published Sep 5, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database