GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,500
Maven
5,000+
npm
4,147
NuGet
735
pip
3,948
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
33 advisories
Filter by severity
Improper Output Neutralization for Logs vulnerability in Apache Log4cxx.
When using JSONLayout,...
Moderate
Unreviewed
CVE-2025-54813
was published
Aug 22, 2025
Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on...
Moderate
Unreviewed
CVE-2024-13949
was published
May 22, 2025
Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows,...
Moderate
Unreviewed
CVE-2025-3942
was published
May 22, 2025
In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging...
Moderate
Unreviewed
CVE-2025-36625
was published
Apr 18, 2025
An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1...
Moderate
Unreviewed
CVE-2024-52962
was published
Apr 8, 2025
A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection....
Moderate
Unreviewed
CVE-2024-12580
was published
Mar 20, 2025
Unauthenticated log effects metrics gathering incident response efforts and potentially exposes...
Moderate
Unreviewed
CVE-2025-23405
was published
Feb 28, 2025
IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files...
Moderate
Unreviewed
CVE-2024-49355
was published
Feb 20, 2025
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address,...
Moderate
Unreviewed
CVE-2024-56473
was published
Feb 6, 2025
The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to...
Moderate
Unreviewed
CVE-2025-0754
was published
Jan 28, 2025
IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not...
Moderate
Unreviewed
CVE-2024-35150
was published
Jan 25, 2025
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3
could allow an authenticated user...
Moderate
Unreviewed
CVE-2024-52891
was published
Jan 7, 2025
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible...
Moderate
Unreviewed
CVE-2024-7696
was published
Jan 7, 2025
A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f....
Moderate
Unreviewed
CVE-2024-8334
was published
Aug 30, 2024
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been...
Moderate
Unreviewed
CVE-2024-8297
was published
Aug 29, 2024
An issue was discovered in Italtel Embrace 1.6.4. The product does not neutralize or incorrectly...
Moderate
Unreviewed
CVE-2024-31845
was published
May 21, 2024
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in...
Moderate
Unreviewed
CVE-2023-28952
was published
May 3, 2024
Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs...
Moderate
Unreviewed
CVE-2023-39461
was published
May 3, 2024
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM...
Moderate
Unreviewed
CVE-2024-22356
was published
Mar 26, 2024
IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to manipulate...
Moderate
Unreviewed
CVE-2023-38020
was published
Feb 2, 2024
A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1...
Moderate
Unreviewed
CVE-2024-0987
was published
Jan 29, 2024
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected...
Moderate
Unreviewed
CVE-2023-7234
was published
Jan 16, 2024
An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7...
Moderate
Unreviewed
CVE-2023-46713
was published
Dec 13, 2023
A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in...
Moderate
Unreviewed
CVE-2023-4065
was published
Sep 27, 2023
While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603,...
Moderate
Unreviewed
CVE-2023-36924
was published
Jul 11, 2023
ProTip!
Advisories are also available from the
GraphQL API