Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4,720 advisories

Loading
Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel... Moderate Unreviewed
CVE-2025-20034 was published May 13, 2025
Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized... Moderate Unreviewed
CVE-2025-29968 was published May 13, 2025
Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service... Moderate Unreviewed
CVE-2025-29955 was published May 13, 2025
The issue was addressed with improved input sanitization. This issue is fixed in watchOS 11.5,... Moderate Unreviewed
CVE-2025-31233 was published May 13, 2025
The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5,... Moderate Unreviewed
CVE-2025-31215 was published May 13, 2025
Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search... Moderate Unreviewed
CVE-2025-4376 was published May 9, 2025
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker... Moderate Unreviewed
CVE-2025-20197 was published May 7, 2025
A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic.... Moderate Unreviewed
CVE-2025-4260 was published May 5, 2025
IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the... Moderate Unreviewed
CVE-2024-52903 was published May 2, 2025
Enterprise Protection contains an improper input validation vulnerability in attachment defense... Moderate Unreviewed
CVE-2024-10635 was published Apr 28, 2025
There is an information disclosure vulnerability in the GoldenDB database product. Attackers can... Moderate Unreviewed
CVE-2025-46574 was published Apr 27, 2025
An improper input validation vulnerability is identified in the End of Life (EOL) OVA based... Moderate Unreviewed
CVE-2025-3837 was published Apr 21, 2025
Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low... Moderate Unreviewed
CVE-2025-26477 was published Apr 17, 2025
A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This... Moderate Unreviewed
CVE-2025-3677 was published Apr 16, 2025
A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4... Moderate Unreviewed
CVE-2025-3622 was published Apr 15, 2025
A vulnerability has been found in Adianti Framework up to 8.0 and classified as critical.... Moderate Unreviewed
CVE-2025-3590 was published Apr 15, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension... Moderate Unreviewed
CVE-2025-32075 was published Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data... Moderate Unreviewed
CVE-2025-32076 was published Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension... Moderate Unreviewed
CVE-2025-32077 was published Apr 11, 2025
Processing a file may lead to a denial-of-service or potentially disclose memory contents. This... Moderate Unreviewed
CVE-2023-42981 was published Apr 11, 2025
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del... Moderate Unreviewed
CVE-2025-29150 was published Apr 10, 2025
IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform... Moderate Unreviewed
CVE-2023-43037 was published Apr 10, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input... Moderate Unreviewed
CVE-2025-30293 was published Apr 8, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input... Moderate Unreviewed
CVE-2025-30294 was published Apr 8, 2025
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2025-29821 was published Apr 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database