GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
838 advisories
Filter by severity
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...
High
Unreviewed
CVE-2025-0360
was published
Mar 4, 2025
The product performs an authorization check when an actor attempts to access a resource or...
High
Unreviewed
CVE-2024-5705
was published
Feb 20, 2025
Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace...
High
Unreviewed
CVE-2025-0937
was published
Feb 12, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
High
Unreviewed
CVE-2025-24407
was published
Feb 11, 2025
An authorization issue was addressed with improved state management. This issue is fixed in...
High
Unreviewed
CVE-2025-24200
was published
Feb 10, 2025
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function....
High
Unreviewed
CVE-2024-57433
was published
Feb 1, 2025
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users...
High
Unreviewed
CVE-2024-57434
was published
Feb 1, 2025
Software installed and run as a non-privileged user may conduct improper read/write operations on...
High
Unreviewed
CVE-2024-46974
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to create arbitrary files on affected...
High
Unreviewed
CVE-2024-23929
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23921
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23963
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded...
High
Unreviewed
CVE-2024-23928
was published
Jan 31, 2025
The vulnerability allows an unauthenticated attacker to access information in PAM database.
High
Unreviewed
CVE-2025-24500
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
High
Unreviewed
CVE-2025-0745
was published
Jan 30, 2025
an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
High
Unreviewed
CVE-2025-0744
was published
Jan 30, 2025
Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the...
High
Unreviewed
CVE-2024-41140
was published
Jan 29, 2025
A Local Code Execution Vulnerability exists in the product and version listed above. The...
High
Unreviewed
CVE-2025-24479
was published
Jan 28, 2025
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path...
High
Unreviewed
CVE-2025-0781
was published
Jan 28, 2025
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma...
High
Unreviewed
CVE-2024-54537
was published
Jan 28, 2025
An authentication issue was addressed with improved state management. This issue is fixed in...
High
Unreviewed
CVE-2024-54542
was published
Jan 28, 2025
In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control...
High
Unreviewed
CVE-2024-55957
was published
Jan 22, 2025
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content...
High
Unreviewed
CVE-2023-40132
was published
Jan 22, 2025
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component:...
High
Unreviewed
CVE-2025-21565
was published
Jan 21, 2025
Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Service...
High
Unreviewed
CVE-2025-21516
was published
Jan 21, 2025
Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component:...
High
Unreviewed
CVE-2025-21506
was published
Jan 21, 2025
ProTip!
Advisories are also available from the
GraphQL API