GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
64 advisories
Filter by severity
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive...
High
Unreviewed
CVE-2025-33137
was published
May 22, 2025
Client-side enforcement of server-side security issue exists in wivia 5 all versions. If...
Moderate
Unreviewed
CVE-2025-47697
was published
May 30, 2025
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...
High
Unreviewed
CVE-2025-40591
was published
Jun 10, 2025
Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows...
Moderate
Unreviewed
CVE-2025-43699
was published
Jun 10, 2025
Improper access control in the certificate management component of Ivanti Connect Secure before...
Moderate
Unreviewed
CVE-2025-5450
was published
Jul 8, 2025
IBM OpenPages with Watson 8.3 and 9.0
is vulnerable to improper input validation due to...
Moderate
Unreviewed
CVE-2025-27367
was published
Jul 8, 2025
An authentication bypass vulnerability was reported in FileZ client application that could allow...
High
Unreviewed
CVE-2025-6249
was published
Jul 17, 2025
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2...
Moderate
Unreviewed
CVE-2024-41750
was published
Jul 23, 2025
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2...
Moderate
Unreviewed
CVE-2024-41751
was published
Jul 23, 2025
IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform...
Moderate
Unreviewed
CVE-2025-36039
was published
Jul 31, 2025
A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0....
Moderate
Unreviewed
CVE-2025-8792
was published
Aug 10, 2025
The Order Tip for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Improper...
High
Unreviewed
CVE-2025-6025
was published
Aug 15, 2025
Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing...
Moderate
Unreviewed
CVE-2025-56694
was published
Aug 27, 2025
A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing...
Critical
Unreviewed
CVE-2024-12603
was published
Dec 13, 2024
ProTip!
Advisories are also available from the
GraphQL API