Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

23,449 advisories

Loading
An integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project... Critical Unreviewed
CVE-2025-53518 was published Aug 25, 2025
Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C... Critical Unreviewed
CVE-2025-29515 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig... Critical Unreviewed
CVE-2025-53557 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig... Critical Unreviewed
CVE-2025-53511 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The... Critical Unreviewed
CVE-2025-53853 was published Aug 25, 2025
A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The... Critical Unreviewed
CVE-2025-54481 was published Aug 25, 2025
A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The... Critical Unreviewed
CVE-2025-54482 was published Aug 25, 2025
A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The... Critical Unreviewed
CVE-2025-54480 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the Nex parsing functionality of The Biosig... Critical Unreviewed
CVE-2025-54462 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The... Critical Unreviewed
CVE-2025-48005 was published Aug 25, 2025
Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in... Critical Unreviewed
CVE-2025-7426 was published Aug 25, 2025
A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform... Critical Unreviewed
CVE-2025-9118 was published Aug 25, 2025
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004... Critical Unreviewed
CVE-2025-36157 was published Aug 24, 2025
The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions... Critical Unreviewed
CVE-2025-5821 was published Aug 23, 2025
The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7... Critical Unreviewed
CVE-2025-7642 was published Aug 23, 2025
Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a... Critical Unreviewed
CVE-2022-43110 was published Aug 22, 2025
Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield... Critical Unreviewed
CVE-2022-31491 was published Aug 22, 2025
The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe... Critical Unreviewed
CVE-2025-51092 was published Aug 22, 2025
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau... Critical Unreviewed
CVE-2025-26496 was published Aug 22, 2025
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior... Critical Unreviewed
CVE-2025-4609 was published Aug 22, 2025
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user... Critical Unreviewed
CVE-2022-45134 was published Aug 22, 2025
MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this... Critical Unreviewed
CVE-2024-50645 was published Aug 22, 2025
Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to... Critical Unreviewed
CVE-2024-53496 was published Aug 22, 2025
An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated... Critical Unreviewed
CVE-2024-52786 was published Aug 22, 2025
Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function... Critical Unreviewed
CVE-2025-55613 was published Aug 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database