GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,499
Maven
5,000+
npm
4,138
NuGet
735
pip
3,945
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
166 advisories
Filter by severity
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default...
Critical
Unreviewed
CVE-2022-24706
was published
Apr 27, 2022
Insecure default configurations in HI-SCAN 6040i Hitrax HX-03-19-I allow authenticated attackers...
Moderate
Unreviewed
CVE-2024-48122
was published
Jan 15, 2025
Apache ActiveMQ's default configuration doesn't secure the API web context
High
CVE-2024-32114
was published
for
org.apache.activemq:apache-activemq
(Maven)
May 2, 2024
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution...
High
Unreviewed
CVE-2022-2196
was published
Jan 9, 2023
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users...
Moderate
Unreviewed
CVE-2024-0387
was published
Feb 26, 2024
A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects...
Moderate
Unreviewed
CVE-2025-2129
was published
Mar 9, 2025
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...
Critical
Unreviewed
CVE-2025-1960
was published
Mar 12, 2025
An unauthenticated remote attacker can gain limited information of the PLC network but the user...
Moderate
Unreviewed
CVE-2024-41975
was published
Mar 18, 2025
Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver...
High
Unreviewed
CVE-2024-41995
was published
Aug 6, 2024
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have...
Moderate
Unreviewed
CVE-2025-27809
was published
Mar 25, 2025
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource...
Moderate
Unreviewed
CVE-2025-29985
was published
Apr 8, 2025
Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an...
Low
Unreviewed
CVE-2025-27443
was published
Apr 8, 2025
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...
Moderate
Unreviewed
CVE-2025-2442
was published
Apr 9, 2025
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...
Moderate
Unreviewed
CVE-2025-2441
was published
Apr 9, 2025
Insecure default settings have been found in recorder products provided by Yokogawa Electric...
Critical
Unreviewed
CVE-2025-1863
was published
Apr 18, 2025
wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting...
Moderate
Unreviewed
CVE-2017-5491
was published
May 13, 2022
An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in...
Critical
Unreviewed
CVE-2017-5178
was published
May 13, 2022
An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier....
High
Unreviewed
CVE-2017-5155
was published
May 13, 2022
In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces
High
Unreviewed
CVE-2025-43015
was published
Apr 17, 2025
Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before...
Moderate
Unreviewed
CVE-2021-33130
was published
May 13, 2022
CNCF K3s Kubernetes kubelet configuration exposes credentials
Moderate
CVE-2025-46599
was published
for
github.com/k3s-io/k3s
(Go)
Apr 25, 2025
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...
Moderate
Unreviewed
CVE-2023-48733
was published
Feb 15, 2024
In the Linux kernel, the following vulnerability has been resolved:
dm btree remove: assign...
Moderate
Unreviewed
CVE-2021-47343
was published
May 21, 2024
A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All...
High
Unreviewed
CVE-2025-31930
was published
May 13, 2025
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap...
Moderate
Unreviewed
CVE-2025-48927
was published
May 28, 2025
ProTip!
Advisories are also available from the
GraphQL API