Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,150
NuGet
736
pip
3,952
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+

7,187 advisories

Loading
An attacker with authenticated and privileged access could modify the contents of a non-sensitive... Moderate Unreviewed
CVE-2025-48394 was published Aug 6, 2025
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack,... Moderate Unreviewed
CVE-2024-52885 was published Aug 6, 2025
Path traversal vulnerability in the virtualization base module. Successful exploitation of this... High Unreviewed
CVE-2025-54652 was published Aug 6, 2025
Path traversal vulnerability in the virtualization file module. Successful exploitation of this... High Unreviewed
CVE-2025-54653 was published Aug 6, 2025
ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of... High Unreviewed
CVE-2012-10034 was published Aug 5, 2025
XBMC version 11, including builds up to the 2012-11-04 nightly release, contains a path traversal... High Unreviewed
CVE-2012-10024 was published Aug 5, 2025
ThinkPHP Path Traversal Vulnerability Critical
CVE-2025-50706 was published for topthink/framework (Composer) Aug 5, 2025
A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4.... Low Unreviewed
CVE-2025-8522 was published Aug 4, 2025
RatPanel can perform remote command execution without authorization High
CVE-2025-53534 was published for github.com/tnborg/panel (Go) Aug 4, 2025
LTLTLXEY devhaozi
A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition up to 8.2. It has been... Moderate Unreviewed
CVE-2025-8516 was published Aug 4, 2025
pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE) Critical
CVE-2025-54802 was published for pyload-ng (pip) Aug 4, 2025
ptrgits giteku
Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access High
CVE-2025-54794 was published for @anthropic-ai/claude-code (npm) Aug 4, 2025
IPX Allows Path Traversal via Prefix Matching Bypass Moderate
CVE-2025-54387 was published for ipx (npm) Aug 4, 2025
dellalibera
The Woffice Core plugin for WordPress is vulnerable to arbitrary file deletion due to... Moderate Unreviewed
CVE-2025-7694 was published Aug 2, 2025
A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500... Moderate Unreviewed
CVE-2013-10062 was published Aug 1, 2025
A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0... Moderate Unreviewed
CVE-2013-10063 was published Aug 1, 2025
A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that... High Unreviewed
CVE-2013-10046 was published Aug 1, 2025
Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network... High Unreviewed
CVE-2025-8480 was published Aug 1, 2025
Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution High
CVE-2025-54386 was published for github.com/traefik/traefik/v2 (Go) Aug 1, 2025
odaysec
A vulnerability was found in code-projects Document Management System 1.0 and classified as... Moderate Unreviewed
CVE-2025-8433 was published Aug 1, 2025
Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and... Critical Unreviewed
CVE-2025-8426 was published Jul 31, 2025
A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7... High Unreviewed
CVE-2014-125125 was published Jul 31, 2025
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal... Moderate Unreviewed
CVE-2025-8151 was published Jul 31, 2025
A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A... High Unreviewed
CVE-2025-46359 was published Jul 31, 2025
A path traversal issue exists in file uploading feature of multiple versions of PowerCMS.... Moderate Unreviewed
CVE-2025-41396 was published Jul 31, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database