Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,128
NuGet
735
pip
3,944
Pub
12
RubyGems
945
Rust
1,024
Swift
39
Unreviewed advisories
All unreviewed
5,000+

7 advisories

Loading
If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and... High Unreviewed
CVE-2025-8696 was published Sep 10, 2025
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat... Moderate Unreviewed
CVE-2025-51397 was published Jul 21, 2025
Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs Moderate
CVE-2025-53651 was published for org.jenkins-ci.plugins:htmlpublisher (Maven) Jul 9, 2025
Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages Moderate
CVE-2025-53650 was published for org.jenkins-ci.plugins:credentials-binding (Maven) Jul 9, 2025
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote... Critical Unreviewed
CVE-2024-36072 was published Jun 27, 2024
glance-store logs s3 access keys Moderate
CVE-2024-1141 was published for glance-store (pip) Feb 1, 2024
m3t3kh4n
An authenticated user can supply malicious HTML and JavaScript code that will be executed in the... Moderate Unreviewed
CVE-2023-23949 was published Jan 26, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database