Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+

111,567 advisories

Loading
In multiple locations, there is a possible way to escape chrome sandbox to attack android... High Unreviewed
CVE-2025-48543 was published Sep 4, 2025
In multiple methods of NotificationChannel.java, there is a possible desynchronization from... High Unreviewed
CVE-2025-48556 was published Sep 4, 2025
In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync... High Unreviewed
CVE-2025-48552 was published Sep 4, 2025
In multiple locations, there is a possible way to read files belonging to other apps due to SQL... High Unreviewed
CVE-2025-48544 was published Sep 4, 2025
In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to... High Unreviewed
CVE-2025-48563 was published Sep 4, 2025
In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device... High Unreviewed
CVE-2025-48553 was published Sep 4, 2025
In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay... High Unreviewed
CVE-2025-32349 was published Sep 4, 2025
In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible... High Unreviewed
CVE-2025-22441 was published Sep 4, 2025
In executeAppFunction of AppSearchManagerService.java, there is a possible background activity... High Unreviewed
CVE-2025-26464 was published Sep 4, 2025
In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch... High Unreviewed
CVE-2025-32324 was published Sep 4, 2025
In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent... High Unreviewed
CVE-2025-32326 was published Sep 4, 2025
In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact... High Unreviewed
CVE-2025-32346 was published Sep 4, 2025
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a... High Unreviewed
CVE-2025-32345 was published Sep 4, 2025
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent... High Unreviewed
CVE-2025-32321 was published Sep 4, 2025
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning... High Unreviewed
CVE-2025-32331 was published Sep 4, 2025
In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due... High Unreviewed
CVE-2025-32333 was published Sep 4, 2025
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer... High Unreviewed
CVE-2024-49714 was published Sep 4, 2025
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in... High Unreviewed
CVE-2025-0089 was published Sep 4, 2025
In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP... High Unreviewed
CVE-2025-26438 was published Sep 4, 2025
In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to... High Unreviewed
CVE-2025-26454 was published Sep 4, 2025
In getCallingAppName of Shared.java, there is a possible way to trick users into granting file... High Unreviewed
CVE-2025-32323 was published Sep 4, 2025
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer... High Unreviewed
CVE-2025-32325 was published Sep 4, 2025
In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to... High Unreviewed
CVE-2025-32327 was published Sep 4, 2025
In multiple locations, there is a possible memory corruption due to a use after free. This could... High Unreviewed
CVE-2025-32332 was published Sep 4, 2025
podman kube play symlink traversal vulnerability High
CVE-2025-9566 was published for github.com/containers/podman/v4 (Go) Sep 4, 2025
Luap99
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database