GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
177 advisories
Filter by severity
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to...
Moderate
Unreviewed
CVE-2025-0092
was published
Aug 27, 2025
Picklescan missing detection when calling pytorch function torch.utils._config_module.load_config
Moderate
GHSA-vv6j-3g6g-2pvj
was published
for
picklescan
(pip)
Aug 22, 2025
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper
Moderate
GHSA-vr7h-p6mm-wpmh
was published
for
picklescan
(pip)
Aug 22, 2025
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run
Moderate
GHSA-f745-w6jp-hpxx
was published
for
picklescan
(pip)
Aug 22, 2025
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
Moderate
GHSA-f4x7-rfwp-v3xw
was published
for
picklescan
(pip)
Aug 22, 2025
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get
Moderate
GHSA-86cj-95qr-2p4f
was published
for
picklescan
(pip)
Aug 22, 2025
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile
Moderate
GHSA-4r9r-ch6f-vxmx
was published
for
picklescan
(pip)
Aug 22, 2025
A vulnerability has been found in Tenda G1 16.01.7.8(3660). Affected by this issue is the...
Moderate
Unreviewed
CVE-2025-8980
was published
Aug 14, 2025
A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the...
Moderate
Unreviewed
CVE-2025-8979
was published
Aug 14, 2025
A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function...
Moderate
Unreviewed
CVE-2025-8978
was published
Aug 14, 2025
Ollama vulnerable to Cross-Domain Token Exposure
Moderate
CVE-2025-51471
was published
for
github.com/ollama/ollama
(Go)
Jul 22, 2025
A vulnerability classified as problematic was found in Eluktronics Control Center 5.23.51.41....
Moderate
Unreviewed
CVE-2025-7884
was published
Jul 20, 2025
Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity...
Moderate
Unreviewed
CVE-2025-5833
was published
Jun 26, 2025
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity...
Moderate
Unreviewed
CVE-2025-5832
was published
Jun 26, 2025
Mithril snapshots for Cardano database could be compromised by an adversary
Moderate
GHSA-qv97-5qr8-2266
was published
for
mithril-client
(Rust)
May 7, 2025
Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS)...
Moderate
Unreviewed
CVE-2025-27735
was published
Apr 8, 2025
WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack
Moderate
CVE-2024-12369
was published
for
org.wildfly.security:wildfly-elytron
(Maven)
Mar 25, 2025
A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified...
Moderate
Unreviewed
CVE-2025-2346
was published
Mar 16, 2025
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an...
Moderate
Unreviewed
CVE-2025-0149
was published
Mar 11, 2025
Zip Exploit Crashes Picklescan But Not PyTorch
Moderate
CVE-2025-1944
was published
for
picklescan
(pip)
Mar 10, 2025
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Moderate
CVE-2025-1945
was published
for
picklescan
(pip)
Mar 10, 2025
Duplicate Advisory: Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Moderate
GHSA-2fh4-gpch-vqv4
was published
for
picklescan
(pip)
Mar 10, 2025
•
withdrawn
Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch
Moderate
GHSA-w6mr-mj53-x258
was published
for
picklescan
(pip)
Mar 10, 2025
•
withdrawn
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices...
Moderate
Unreviewed
CVE-2025-27257
was published
Mar 10, 2025
Hickory DNS failure to verify self-signed RRSIG for DNSKEYs
Moderate
GHSA-v7pc-74h8-xq2h
was published
for
hickory-proto
(Rust)
Feb 10, 2025
ProTip!
Advisories are also available from the
GraphQL API