GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,150
NuGet
736
pip
3,952
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
340 advisories
Filter by severity
This vulnerability affects Firefox < 143 and Thunderbird < 143.
Moderate
Unreviewed
CVE-2025-10530
was published
Sep 16, 2025
API Security bypass through header manipulation
Moderate
Unreviewed
CVE-2024-55925
was published
Jan 23, 2025
Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially...
High
Unreviewed
CVE-2025-7448
was published
Sep 12, 2025
One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to...
Moderate
Unreviewed
CVE-2025-56689
was published
Sep 8, 2025
The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest...
Moderate
Unreviewed
CVE-2025-56608
was published
Sep 3, 2025
In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic...
Low
Unreviewed
CVE-2025-26419
was published
Sep 4, 2025
Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of...
Critical
Unreviewed
CVE-2025-1298
was published
Feb 14, 2025
In multiple locations, there is a possible lock screen bypass due to a logic error in the code....
Moderate
Unreviewed
CVE-2025-26421
was published
Sep 4, 2025
In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a...
Low
Unreviewed
CVE-2025-26428
was published
Sep 4, 2025
On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503...
High
Unreviewed
CVE-2025-6188
was published
Aug 26, 2025
Official Document Management System developed by 2100 Technology has an Authentication Bypass...
Critical
Unreviewed
CVE-2025-8853
was published
Aug 11, 2025
An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval...
High
Unreviewed
CVE-2025-31511
was published
Jul 22, 2025
IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges...
High
Unreviewed
CVE-2025-36119
was published
Aug 8, 2025
An Authentication Bypass vulnerability in Blue Access' Cobalt X1 thru 02.000.187 allows an...
Moderate
Unreviewed
CVE-2025-50454
was published
Aug 5, 2025
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...
Critical
Unreviewed
CVE-2025-36594
was published
Aug 4, 2025
CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to...
Moderate
Unreviewed
CVE-2025-46018
was published
Aug 1, 2025
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in...
Critical
Unreviewed
CVE-2025-43245
was published
Jul 30, 2025
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd...
Moderate
Unreviewed
CVE-2025-34065
was published
Jul 1, 2025
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd...
Moderate
Unreviewed
CVE-2025-34053
was published
Jul 1, 2025
A cryptographic authentication bypass vulnerability exists in OneLogin AD Connector prior to 6.1...
Critical
Unreviewed
CVE-2025-34063
was published
Jul 1, 2025
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication...
Critical
Unreviewed
CVE-2024-54085
was published
Mar 11, 2025
The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using...
Moderate
Unreviewed
CVE-2025-23168
was published
Jun 19, 2025
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful...
High
Unreviewed
CVE-2023-4566
was published
Jan 16, 2024
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful...
High
Unreviewed
CVE-2023-44117
was published
Jan 16, 2024
This issue was addressed by improving Face ID anti-spoofing models. This issue is fixed in iOS 17...
Moderate
Unreviewed
CVE-2023-41069
was published
Jan 11, 2024
ProTip!
Advisories are also available from the
GraphQL API