GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,736
Maven
5,000+
npm
4,336
NuGet
764
pip
4,110
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
11,168 advisories
Filter by severity
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.4,...
Low
Unreviewed
CVE-2025-59923
was published
Dec 9, 2025
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6...
Low
Unreviewed
CVE-2025-57823
was published
Dec 9, 2025
A vulnerability in NETGEAR Nighthawk R7000P routers lets an authenticated admin execute OS...
Low
Unreviewed
CVE-2025-12945
was published
Dec 9, 2025
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)....
Low
Unreviewed
CVE-2025-40818
was published
Dec 9, 2025
A post-authentication flaw in the network two-phase commit protocol used for cross-shard...
Low
Unreviewed
CVE-2025-14345
was published
Dec 9, 2025
IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability...
Low
Unreviewed
CVE-2024-56464
was published
Dec 9, 2025
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could...
Low
Unreviewed
CVE-2025-36102
was published
Dec 9, 2025
A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R....
Low
Unreviewed
CVE-2025-65228
was published
Dec 8, 2025
phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export...
Low
Unreviewed
CVE-2025-60912
was published
Dec 8, 2025
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of...
Low
Unreviewed
CVE-2025-66331
was published
Dec 8, 2025
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of...
Low
Unreviewed
CVE-2025-66332
was published
Dec 8, 2025
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of...
Low
Unreviewed
CVE-2025-66333
was published
Dec 8, 2025
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of...
Low
Unreviewed
CVE-2025-66334
was published
Dec 8, 2025
A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android....
Low
Unreviewed
CVE-2025-14111
was published
Dec 6, 2025
An issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Din...
Low
Unreviewed
CVE-2025-63896
was published
Dec 4, 2025
Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an...
Low
Unreviewed
CVE-2025-12997
was published
Dec 4, 2025
A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the...
Low
Unreviewed
CVE-2025-14007
was published
Dec 4, 2025
Interactive service agent in OpenVPN version 2.5.0 through 2.7_rc2 on Windows allows a local...
Low
Unreviewed
CVE-2025-13751
was published
Dec 3, 2025
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform...
Low
Unreviewed
CVE-2025-20382
was published
Dec 3, 2025
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform...
Low
Unreviewed
CVE-2025-20385
was published
Dec 3, 2025
In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform...
Low
Unreviewed
CVE-2025-20388
was published
Dec 3, 2025
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a...
Low
Unreviewed
CVE-2025-12954
was published
Dec 3, 2025
Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local...
Low
Unreviewed
CVE-2025-13640
was published
Dec 2, 2025
A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is...
Low
Unreviewed
CVE-2025-9799
was published
Dec 2, 2025
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a...
Low
Unreviewed
CVE-2025-59696
was published
Dec 2, 2025
ProTip!
Advisories are also available from the
GraphQL API