Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

126,693 advisories

Loading
A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an... Moderate Unreviewed
CVE-2025-2921 was published Mar 28, 2025
Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via... Moderate Unreviewed
CVE-2025-31162 was published Mar 28, 2025
Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local... Moderate Unreviewed
CVE-2025-31163 was published Mar 28, 2025
A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the... Moderate Unreviewed
CVE-2025-2914 was published Mar 28, 2025
A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by... Moderate Unreviewed
CVE-2025-2912 was published Mar 28, 2025
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to... Moderate Unreviewed
CVE-2025-2713 was published Mar 28, 2025
A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability... Moderate Unreviewed
CVE-2025-2915 was published Mar 28, 2025
A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3.... Moderate Unreviewed
CVE-2025-2917 was published Mar 28, 2025
A vulnerability was found in HDF5 up to 1.14.6. It has been rated as problematic. Affected by... Moderate Unreviewed
CVE-2025-2913 was published Mar 28, 2025
A vulnerability, which was classified as critical, has been found in Aishida Call Center System... Moderate Unreviewed
CVE-2025-2916 was published Mar 28, 2025
Cross-Site Request Forgery (CSRF) vulnerability in ReichertBrothers SimplyRETS Real Estate IDX... Moderate Unreviewed
CVE-2025-31010 was published Mar 28, 2025
An attacker with access to the network where the vulnerable device is located could capture... Moderate Unreviewed
CVE-2025-2859 was published Mar 28, 2025
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations... Moderate Unreviewed
CVE-2025-2877 was published Mar 28, 2025
Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware... Moderate Unreviewed
CVE-2025-2863 was published Mar 28, 2025
SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption. This allows an... Moderate Unreviewed
CVE-2025-2862 was published Mar 28, 2025
Unauthorised access to the call forwarding service system in MeetMe products in versions prior to... Moderate Unreviewed
CVE-2025-2911 was published Mar 28, 2025
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information... Moderate Unreviewed
CVE-2025-2860 was published Mar 28, 2025
SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for... Moderate Unreviewed
CVE-2025-2861 was published Mar 28, 2025
User enumeration in the password reset module of the MeetMe authentication service in versions... Moderate Unreviewed
CVE-2025-2910 was published Mar 28, 2025
IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a... Moderate Unreviewed
CVE-2025-0986 was published Mar 28, 2025
The lack of encryption in the DuoxMe (formerly Blue) application binary in versions prior to 3.3... Moderate Unreviewed
CVE-2025-2909 was published Mar 28, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Aurélien LWS LWS SMS allows Cross Site Request... Moderate Unreviewed
CVE-2025-31457 was published Mar 28, 2025
Missing Authorization vulnerability in webrangers Clear Sucuri Cache allows Exploiting... Moderate Unreviewed
CVE-2025-31469 was published Mar 28, 2025
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in... Moderate Unreviewed
CVE-2025-31465 was published Mar 28, 2025
Cross-Site Request Forgery (CSRF) vulnerability in bsndev Ultimate Security Checker allows Cross... Moderate Unreviewed
CVE-2025-31456 was published Mar 28, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database