Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,885 advisories

Loading
A vulnerability was found in Intelbras InControl 2.21.60.9 and classified as problematic. This... Low Unreviewed
CVE-2025-8515 was published Aug 4, 2025
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the... Low Unreviewed
CVE-2025-54956 was published Aug 3, 2025
In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit... Low Unreviewed
CVE-2025-54350 was published Aug 3, 2025
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get... Low Unreviewed
CVE-2025-23290 was published Aug 3, 2025
NVIDIA GPU Display Driver for Windows contains a vulnerability  where an attacker may cause an... Low Unreviewed
CVE-2025-23288 was published Aug 3, 2025
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access... Low Unreviewed
CVE-2025-23287 was published Aug 3, 2025
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected... Low Unreviewed
CVE-2024-13978 was published Aug 2, 2025
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and... Low Unreviewed
CVE-2023-44976 was published Aug 1, 2025
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server... Low Unreviewed
CVE-2023-32251 was published Jul 31, 2025
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product Low Unreviewed
CVE-2025-37108 was published Jul 31, 2025
Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product Low Unreviewed
CVE-2025-37109 was published Jul 31, 2025
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the... Low Unreviewed
CVE-2025-51384 was published Jul 31, 2025
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the... Low Unreviewed
CVE-2025-51385 was published Jul 31, 2025
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the... Low Unreviewed
CVE-2025-51383 was published Jul 31, 2025
Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains a Use of Hard-coded Password... Low Unreviewed
CVE-2025-36609 was published Jul 30, 2025
In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration Low Unreviewed
CVE-2025-54529 was published Jul 28, 2025
A flaw was found in GLib. A denial of service on Windows platforms may occur if an application... Low Unreviewed
CVE-2025-4056 was published Jul 28, 2025
A vulnerability has been found in Vaelsys 4.1.0 and classified as problematic. This vulnerability... Low Unreviewed
CVE-2025-8260 was published Jul 28, 2025
A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998... Low Unreviewed
CVE-2025-8206 was published Jul 26, 2025
A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179.... Low Unreviewed
CVE-2025-8204 was published Jul 26, 2025
Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated... Low Unreviewed
CVE-2025-54568 was published Jul 25, 2025
HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain... Low Unreviewed
CVE-2025-0253 was published Jul 25, 2025
HCL IEM is affected by a password in cleartext vulnerability.  Sensitive information is... Low Unreviewed
CVE-2025-0252 was published Jul 25, 2025
HCL IEM is affected by a concurrent login vulnerability.  The application allows multiple... Low Unreviewed
CVE-2025-0251 was published Jul 25, 2025
HCL IEM is affected by an authorization token sent in cookie vulnerability.  A token used for... Low Unreviewed
CVE-2025-0250 was published Jul 25, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database