GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
82 advisories
Filter by severity
A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by...
Moderate
Unreviewed
CVE-2025-47416
was published
Sep 9, 2025
A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of...
Moderate
Unreviewed
CVE-2025-9401
was published
Aug 25, 2025
In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct...
Critical
Unreviewed
CVE-2025-54336
was published
Aug 19, 2025
IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could...
Moderate
Unreviewed
CVE-2025-27909
was published
Aug 18, 2025
The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an...
High
Unreviewed
CVE-2025-3102
was published
Apr 10, 2025
An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17...
Low
Unreviewed
CVE-2024-5528
was published
Feb 5, 2025
When curl is asked to use HSTS, the expiry time for a subdomain might
overwrite a parent domain's...
Moderate
Unreviewed
CVE-2024-9681
was published
Nov 6, 2024
An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks...
Moderate
Unreviewed
CVE-2024-39534
was published
Oct 11, 2024
The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security...
Moderate
Unreviewed
CVE-2024-6641
was published
Sep 18, 2024
Under certain circumstances the ExacqVision Web Services does not provide sufficient protection...
Moderate
Unreviewed
CVE-2024-32862
was published
Aug 2, 2024
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset...
Critical
Unreviewed
CVE-2024-24621
was published
Jul 26, 2024
ServiceNow has addressed an input validation vulnerability that was identified in the Washington...
Critical
Unreviewed
CVE-2024-5217
was published
Jul 10, 2024
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication...
High
Unreviewed
CVE-2024-39742
was published
Jul 8, 2024
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6...
High
Unreviewed
CVE-2024-4032
was published
Jun 17, 2024
SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy ...
High
Unreviewed
CVE-2024-37131
was published
Jun 13, 2024
In the Linux kernel, the following vulnerability has been resolved:
mptcp: ensure tx skbs always...
Moderate
Unreviewed
CVE-2021-47370
was published
May 21, 2024
An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an...
High
Unreviewed
CVE-2024-2223
was published
Apr 9, 2024
A potential attacker with access to the Westermo Lynx device would be able to execute...
Moderate
Unreviewed
CVE-2023-45213
was published
Feb 7, 2024
A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected...
Low
Unreviewed
CVE-2015-10129
was published
Feb 4, 2024
IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an...
Moderate
Unreviewed
CVE-2023-50940
was published
Feb 2, 2024
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function...
Moderate
Unreviewed
CVE-2023-49994
was published
Dec 12, 2023
gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream...
High
Unreviewed
CVE-2023-46009
was published
Oct 18, 2023
MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable...
Moderate
Unreviewed
CVE-2015-6964
was published
Sep 25, 2023
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed...
Moderate
Unreviewed
CVE-2023-23766
was published
Sep 22, 2023
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This...
High
Unreviewed
CVE-2023-23840
was published
Sep 14, 2023
ProTip!
Advisories are also available from the
GraphQL API