Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+

1,908 advisories

Loading
SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative... Critical Unreviewed
CVE-2025-42966 was published Jul 8, 2025
SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload... Critical Unreviewed
CVE-2025-42964 was published Jul 8, 2025
Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution... Critical Unreviewed
CVE-2025-6810 was published Jul 7, 2025
Mescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code... Critical Unreviewed
CVE-2025-6811 was published Jul 7, 2025
Deserialization of Untrusted Data vulnerability in designthemes Red Art allows Object Injection.... High Unreviewed
CVE-2025-52828 was published Jul 4, 2025
Deserialization of Untrusted Data vulnerability in BestWpDeveloper WooCommerce Product Multi... Critical Unreviewed
CVE-2025-49417 was published Jul 4, 2025
ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks against .NET... Moderate Unreviewed
CVE-2025-43713 was published Jul 3, 2025
An unauthenticated remote command execution vulnerability exists in the applyCT component of the... Critical Unreviewed
CVE-2025-34067 was published Jul 2, 2025
The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to,... Critical Unreviewed
CVE-2024-13786 was published Jul 2, 2025
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is... High Unreviewed
CVE-2025-6464 was published Jul 2, 2025
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. High Unreviewed
CVE-2025-53416 was published Jun 30, 2025
Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code... High Unreviewed
CVE-2025-53415 was published Jun 30, 2025
akka-cluster-metrics uses Java serialization for cluster metrics Moderate
CVE-2025-53393 was published for com.typesafe.akka:akka-cluster-metrics_2.13 (Maven) Jun 29, 2025
Apache Seata Vulnerable to Deserialization of Untrusted Data Critical
CVE-2025-32897 was published for org.apache.seata:seata-config-core (Maven) Jun 28, 2025
oscerd
Deserialization of Untrusted Data vulnerability in uxper Sala allows Object Injection. This issue... High Unreviewed
CVE-2025-52826 was published Jun 27, 2025
Deserialization of Untrusted Data vulnerability in uxper Nuss allows Object Injection. This issue... High Unreviewed
CVE-2025-52827 was published Jun 27, 2025
Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms allows Object... Critical Unreviewed
CVE-2025-52709 was published Jun 27, 2025
Deserialization of Untrusted Data vulnerability in BoldThemes Amwerk allows Object Injection.... Critical Unreviewed
CVE-2025-52724 was published Jun 27, 2025
Deserialization of Untrusted Data vulnerability in pebas CouponXxL allows Object Injection. This... Critical Unreviewed
CVE-2025-52725 was published Jun 27, 2025
Deserialization of Untrusted Data vulnerability in pep.vn WP Optimize By xTraffic allows Object... Critical Unreviewed
CVE-2025-28970 was published Jun 27, 2025
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2025-36038 was published Jun 26, 2025
Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability.... Critical Unreviewed
CVE-2025-2566 was published Jun 24, 2025
A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5... Critical Unreviewed
CVE-2025-25034 was published Jun 20, 2025
Upsonic has vulnerability in Pickle Handler component that can lead to deserialization Low
CVE-2025-6279 was published for upsonic (pip) Jun 19, 2025
PowSyBl Core allows deserialization of untrusted SparseMatrix data High
CVE-2025-47771 was published for com.powsybl:powsybl-math (Maven) Jun 19, 2025
arthurscchan AdamKorcz
olperr1 rolnico
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database