GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,494
Maven
5,000+
npm
4,129
NuGet
735
pip
3,944
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
88 advisories
Filter by severity
An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows...
High
Unreviewed
CVE-2025-34520
was published
Aug 28, 2025
An authentication issue was addressed with improved state management. This issue is fixed in...
High
Unreviewed
CVE-2025-24206
was published
Apr 29, 2025
The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to...
High
Unreviewed
CVE-2025-5060
was published
Aug 23, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in ABB ASPECT.This issue...
High
Unreviewed
CVE-2025-53187
was published
Aug 11, 2025
An information disclosure vulnerability exists in the /goform/getproductInfo functionality of...
High
Unreviewed
CVE-2025-24496
was published
Aug 20, 2025
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet...
High
Unreviewed
CVE-2024-26009
was published
Aug 12, 2025
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK...
High
Unreviewed
CVE-2025-40743
was published
Aug 12, 2025
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX...
High
Unreviewed
CVE-2025-40761
was published
Aug 12, 2025
An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval...
High
Unreviewed
CVE-2025-31512
was published
Jul 22, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExperts Post SMTP...
High
Unreviewed
CVE-2025-24000
was published
Aug 7, 2025
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API...
High
Unreviewed
CVE-2025-44957
was published
Aug 4, 2025
An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that...
High
Unreviewed
CVE-2025-7742
was published
Jul 25, 2025
The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all...
High
Unreviewed
CVE-2025-7692
was published
Jul 22, 2025
The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation...
High
Unreviewed
CVE-2025-1313
was published
Jul 12, 2025
Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all...
High
Unreviewed
CVE-2025-24332
was published
Jul 2, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemesGrove WP SmartPay...
High
Unreviewed
CVE-2025-25171
was published
Jun 27, 2025
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2...
High
Unreviewed
CVE-2025-32976
was published
Jun 26, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Password...
High
Unreviewed
CVE-2025-31019
was published
Jun 9, 2025
The Browse As plugin for WordPress is vulnerable to authentication bypass in versions up to, and...
High
Unreviewed
CVE-2025-5190
was published
May 30, 2025
In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre...
High
Unreviewed
CVE-2025-4687
was published
May 29, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in mediaticus Subaccounts...
High
Unreviewed
CVE-2025-47461
was published
May 23, 2025
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable...
High
Unreviewed
CVE-2024-7628
was published
Aug 15, 2024
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA -...
High
Unreviewed
CVE-2025-47710
was published
May 14, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA -...
High
Unreviewed
CVE-2025-47707
was published
May 14, 2025
It was possible to craft an email that showed a tracking link as an attachment. If the user...
High
Unreviewed
CVE-2025-3932
was published
May 14, 2025
ProTip!
Advisories are also available from the
GraphQL API