GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
37 advisories
Filter by severity
In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files
Moderate
Unreviewed
CVE-2025-57734
was published
Aug 20, 2025
By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the...
Moderate
Unreviewed
CVE-2025-8452
was published
Aug 12, 2025
An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS...
Moderate
Unreviewed
CVE-2024-51977
was published
Jun 26, 2025
In devinfo, there is a possible information disclosure due to a missing SELinux policy. This...
Moderate
Unreviewed
CVE-2025-20665
was published
May 5, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-31421
was published
Apr 4, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-31558
was published
Apr 3, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-31550
was published
Apr 1, 2025
yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via...
Moderate
Unreviewed
CVE-2025-25586
was published
Mar 18, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-22633
was published
Feb 24, 2025
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade...
Moderate
Unreviewed
CVE-2022-43933
was published
Feb 4, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-24689
was published
Jan 27, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-22773
was published
Jan 15, 2025
During MegaBIP installation process, a user is encouraged to change a default path to...
Moderate
Unreviewed
CVE-2024-6880
was published
Jan 10, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.1...
Moderate
Unreviewed
CVE-2025-0194
was published
Jan 8, 2025
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...
Moderate
Unreviewed
CVE-2025-22306
was published
Jan 7, 2025
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with...
Moderate
Unreviewed
CVE-2024-47580
was published
Dec 10, 2024
An attacker authenticated as an administrator can use an exposed webservice to upload or download...
Moderate
Unreviewed
CVE-2024-47579
was published
Dec 10, 2024
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a...
Moderate
Unreviewed
CVE-2024-9671
was published
Oct 9, 2024
On Windows systems, the Arc configuration files resulted to be world-readable.
This can lead...
Moderate
Unreviewed
CVE-2023-5937
was published
May 15, 2024
An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows....
High
Unreviewed
CVE-2024-31954
was published
May 14, 2024
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1)....
High
Unreviewed
CVE-2024-22045
was published
Mar 12, 2024
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain...
High
Unreviewed
CVE-2024-22433
was published
Feb 6, 2024
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified...
Moderate
Unreviewed
CVE-2024-0191
was published
Jan 2, 2024
An information exposure vulnerability has been found, the exploitation of which could allow a...
High
Unreviewed
CVE-2023-4595
was published
Nov 23, 2023
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores...
High
Unreviewed
CVE-2023-5003
was published
Oct 16, 2023
ProTip!
Advisories are also available from the
GraphQL API