Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,800
Erlang
36
GitHub Actions
29
Go
2,380
Maven
5,000+
npm
4,005
NuGet
720
pip
3,805
Pub
12
RubyGems
927
Rust
986
Swift
38
Unreviewed advisories
All unreviewed
5,000+

6,972 advisories

Loading
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability Critical
CVE-2024-56198 was published for path-sanitizer (npm) Jan 2, 2025
realArcherL
Karmada Tar Slips in CRDs archive extraction Moderate
CVE-2024-56514 was published for github.com/karmada-io/karmada (Go) Jan 3, 2025
zhzhuang-zju RainbowMango
TheZ3ro suidpit
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker... Moderate Unreviewed
CVE-2024-41765 was published Jan 4, 2025
The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all... High Unreviewed
CVE-2024-12849 was published Jan 7, 2025
The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all... High Unreviewed
CVE-2024-12152 was published Jan 7, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-56286 was published Jan 7, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... Low Unreviewed
CVE-2024-12425 was published Jan 7, 2025
An attacker who successfully exploited these vulnerabilities could grant read access to files. A... Moderate Unreviewed
CVE-2024-12429 was published Jan 7, 2025
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2023-52953 was published Jan 8, 2025
The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to,... Moderate Unreviewed
CVE-2024-10585 was published Jan 8, 2025
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up... High Unreviewed
CVE-2024-9939 was published Jan 8, 2025
Soft Serve vulnerable to path traversal attacks Moderate
CVE-2025-22130 was published for github.com/charmbracelet/soft-serve (Go) Jan 8, 2025
keras Path Traversal vulnerability Moderate
CVE-2024-55459 was published for keras (pip) Jan 8, 2025
The Permission Model assumes that any path starting with two backslashes \ has a four-character... Low Unreviewed
CVE-2024-37372 was published Jan 9, 2025
The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite... Critical Unreviewed
CVE-2024-11642 was published Jan 9, 2025
A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the... Moderate Unreviewed
CVE-2025-0401 was published Jan 13, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email... High Unreviewed
CVE-2023-42226 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the... High Unreviewed
CVE-2023-42232 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the... High Unreviewed
CVE-2023-42225 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal.... Moderate Unreviewed
CVE-2023-42229 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the... High Unreviewed
CVE-2023-42227 was published Jan 14, 2025
Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An... Moderate Unreviewed
CVE-2024-12083 was published Jan 14, 2025
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet... Moderate Unreviewed
CVE-2024-33502 was published Jan 14, 2025
A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through... Moderate Unreviewed
CVE-2024-32115 was published Jan 14, 2025
A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and... Moderate Unreviewed
CVE-2024-46664 was published Jan 14, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database