Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,582
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,524
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

30 advisories

Loading
When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are... Critical Unreviewed
CVE-2026-23556 was published Jul 9, 2026
golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys Critical
CVE-2026-39832 was published for golang.org/x/crypto (Go) Jun 25, 2026
Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows... Critical Unreviewed
CVE-2025-43698 was published Jun 10, 2025
Insecure permissions in TSplus Remote Access v17.30 allow attackers to retrieve a list of all... Critical Unreviewed
CVE-2025-26318 was published Mar 4, 2025
Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2... Critical Unreviewed
CVE-2024-56973 was published Feb 14, 2025
Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to... Critical Unreviewed
CVE-2024-46310 was published Jan 13, 2025
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an... Critical Unreviewed
CVE-2024-54880 was published Jan 6, 2025
An Escalation of Privilege security vulnerability was found in SecureAge Security Suite software... Critical Unreviewed
CVE-2024-46622 was published Jan 6, 2025
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an... Critical Unreviewed
CVE-2024-54879 was published Jan 6, 2025
An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate... Critical Unreviewed
CVE-2024-55507 was published Jan 3, 2025
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2024-54465 was published Dec 12, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v... Critical Unreviewed
CVE-2024-41645 was published Dec 7, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v... Critical Unreviewed
CVE-2024-41649 was published Dec 7, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v... Critical Unreviewed
CVE-2024-41644 was published Dec 7, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v... Critical Unreviewed
CVE-2024-41646 was published Dec 7, 2024
Insecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate... Critical Unreviewed
CVE-2024-36532 was published Jun 22, 2024
Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote... Critical Unreviewed
CVE-2023-47463 was published Nov 30, 2023
SaToken privilege escalation vulnerability Critical
CVE-2023-44794 was published for cn.dev33:sa-token-core (Maven) Oct 25, 2023
Access Control Bypass in Spring Security Critical
CVE-2023-34034 was published for org.springframework.security:spring-security-config (Maven) Jul 19, 2023
bbossola Credited to bbossola and furti furti furti
Remote code execution in Voyager Critical
CVE-2020-36070 was published for tcg/voyager (Composer) Apr 26, 2023
Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders... Critical Unreviewed
CVE-2021-33990 was published Apr 16, 2023
If a user had granted a permission to a webpage and saved that grant, any webpage running on the... Critical Unreviewed
CVE-2021-29971 was published May 24, 2022
Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which... Critical Unreviewed
CVE-2020-18890 was published May 24, 2022
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10... Critical Unreviewed
CVE-2018-4115 was published May 13, 2022
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1,... Critical Unreviewed
CVE-2017-8589 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database