GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
26,867 advisories
Filter by severity
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to...
Critical
Unreviewed
CVE-2025-23266
was published
Jul 17, 2025
The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege...
Critical
Unreviewed
CVE-2025-8898
was published
Aug 16, 2025
The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to...
Critical
Unreviewed
CVE-2025-7441
was published
Aug 16, 2025
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center...
Critical
Unreviewed
CVE-2025-20265
was published
Aug 14, 2025
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
Critical
Unreviewed
CVE-2021-30194
was published
May 24, 2022
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
Critical
Unreviewed
CVE-2021-30189
was published
May 24, 2022
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.
Critical
Unreviewed
CVE-2021-30188
was published
May 24, 2022
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
Critical
Unreviewed
CVE-2021-30193
was published
May 24, 2022
A vulnerability has been found in the MSoft MFlash
application that allows
execution of...
Critical
Unreviewed
CVE-2025-9060
was published
Aug 15, 2025
An improper neutralization of special elements used in an OS command ('OS Command Injection')...
Critical
Unreviewed
CVE-2025-25256
was published
Aug 12, 2025
KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control...
Critical
Unreviewed
CVE-2025-43983
was published
Aug 14, 2025
An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software...
Critical
Unreviewed
CVE-2025-43984
was published
Aug 14, 2025
In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid...
Critical
Unreviewed
CVE-2025-27845
was published
Aug 14, 2025
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of...
Critical
Unreviewed
CVE-2025-8875
was published
Aug 14, 2025
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This...
Critical
Unreviewed
CVE-2025-8876
was published
Aug 14, 2025
An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for...
Critical
Unreviewed
CVE-2025-54473
was published
Aug 15, 2025
The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to...
Critical
Unreviewed
CVE-2025-7778
was published
Aug 15, 2025
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing...
Critical
Unreviewed
CVE-2025-6679
was published
Aug 15, 2025
myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The...
Critical
Unreviewed
CVE-2011-10018
was published
Aug 13, 2025
Flowise JS injection remote code execution
Critical
CVE-2025-55346
was published
for
flowise
(npm)
Aug 14, 2025
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code...
Critical
Unreviewed
CVE-2025-52385
was published
Aug 13, 2025
An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings...
Critical
Unreviewed
CVE-2025-50594
was published
Aug 13, 2025
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation...
Critical
Unreviewed
CVE-2025-7353
was published
Aug 14, 2025
The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough...
Critical
Unreviewed
CVE-2025-8047
was published
Aug 14, 2025
An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices. The TELNET service...
Critical
Unreviewed
CVE-2025-43986
was published
Aug 13, 2025
ProTip!
Advisories are also available from the
GraphQL API