GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,300 advisories
Filter by severity
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: SDK...
Moderate
Unreviewed
CVE-2025-21560
was published
Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Moderate
Unreviewed
CVE-2025-21567
was published
Jan 21, 2025
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft ...
Moderate
Unreviewed
CVE-2025-21539
was published
Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Moderate
Unreviewed
CVE-2025-21540
was published
Jan 21, 2025
Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component...
Moderate
Unreviewed
CVE-2025-21561
was published
Jan 21, 2025
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Moderate
CVE-2025-24397
was published
for
org.jenkins-ci.plugins:gitlab-plugin
(Maven)
Jan 22, 2025
In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security...
Moderate
Unreviewed
CVE-2024-42013
was published
Jan 22, 2025
Cache confusion in Jenkins Eiffel Broadcaster Plugin
Moderate
CVE-2025-24400
was published
for
com.axis.jenkins.plugins.eiffel:eiffel-broadcaster
(Maven)
Jan 22, 2025
Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
Moderate
CVE-2025-24401
was published
for
io.jenkins.plugins:folder-auth
(Maven)
Jan 22, 2025
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that...
Moderate
Unreviewed
CVE-2023-50946
was published
Jan 26, 2025
This issue was addressed with improved redaction of sensitive information. This issue is fixed in...
Moderate
Unreviewed
CVE-2024-54550
was published
Jan 28, 2025
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
Moderate
Unreviewed
CVE-2024-54488
was published
Jan 28, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24114
was published
Jan 28, 2025
A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba...
Moderate
Unreviewed
CVE-2025-23053
was published
Jan 28, 2025
A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer...
Moderate
Unreviewed
CVE-2025-23054
was published
Jan 28, 2025
RuoYi has insecure permissions
Moderate
CVE-2024-57438
was published
for
com.ruoyi:ruoyi
(Maven)
Jan 29, 2025
An Improper Access Control vulnerability has been found in EmbedAI
2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0741
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0742
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0743
was published
Jan 30, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS...
Moderate
Unreviewed
CVE-2025-24099
was published
Jan 30, 2025
This vulnerability allows network-adjacent attackers to disclose sensitive information on...
Moderate
Unreviewed
CVE-2024-23937
was published
Jan 31, 2025
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Moderate
CVE-2025-24860
was published
for
org.apache.cassandra:cassandra-all
(Maven)
Feb 4, 2025
An error when handling authorization related to the import / export interfaces on the RISC...
Moderate
Unreviewed
CVE-2021-41528
was published
Feb 7, 2025
SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose...
Moderate
Unreviewed
CVE-2025-24869
was published
Feb 11, 2025
The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain...
Moderate
Unreviewed
CVE-2025-24872
was published
Feb 11, 2025
ProTip!
Advisories are also available from the
GraphQL API