GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
12 advisories
Filter by severity
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5,...
Low
Unreviewed
CVE-2021-25316
was published
May 24, 2022
Insecure temporary file used in com.squareup:connect
Low
CVE-2021-23331
was published
for
com.squareup:connect
(Maven)
Jun 16, 2021
ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name
Low
CVE-2013-0162
was published
for
ruby_parser
(RubyGems)
May 5, 2022
Jenkins temporary uploaded file created with insecure permissions
Low
CVE-2023-43498
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
Sep 20, 2023
RPLY Predictable Tmpfile Names Allows Cache Spoofing
Low
CVE-2014-1604
was published
for
RPLY
(pip)
May 17, 2022
A vulnerability classified as problematic was found in chidiwilliams buzz 1.1.0. This...
Low
Unreviewed
CVE-2024-10372
was published
Oct 25, 2024
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Low
CVE-2020-10744
was published
for
ansible
(pip)
Feb 9, 2022
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Low
CVE-2020-1733
was published
for
ansible
(pip)
Apr 20, 2021
If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary...
Low
Unreviewed
CVE-2024-2313
was published
Mar 11, 2024
Spring Cloud Contract vulnerable to local information disclosure
Low
CVE-2024-22236
was published
for
org.springframework.cloud:spring-cloud-contract-shade
(Maven)
Jan 31, 2024
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.
Low
Unreviewed
CVE-2015-0849
was published
Jun 27, 2025
A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function...
Low
Unreviewed
CVE-2025-9474
was published
Aug 26, 2025
ProTip!
Advisories are also available from the
GraphQL API