Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,790
Erlang
36
GitHub Actions
29
Go
2,370
Maven
5,000+
npm
3,994
NuGet
720
pip
3,783
Pub
12
RubyGems
927
Rust
982
Swift
38
Unreviewed advisories
All unreviewed
5,000+

11,296 advisories

Loading
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs Moderate
CVE-2023-34239 was published for gradio (pip) Jun 9, 2023
mastomii
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple... Moderate Unreviewed
CVE-2023-2673 was published Jun 13, 2023
Improper input validation in the installer for Zoom for Windows clients before 5.14.0 may allow... High Unreviewed
CVE-2023-34122 was published Jun 13, 2023
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting ... High Unreviewed
CVE-2023-34121 was published Jun 13, 2023
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.  The... High Unreviewed
CVE-2023-30631 was published Jun 14, 2023
The Netskope client service running with NT\SYSTEM privileges accepts network connections from... High Unreviewed
CVE-2023-2270 was published Jun 15, 2023
In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due... Moderate Unreviewed
CVE-2023-21136 was published Jun 15, 2023
In onCreate of NotificationAccessSettings.java, there is a possible failure to persist... High Unreviewed
CVE-2023-21135 was published Jun 15, 2023
In onResume of AppManagementFragment.java, there is a possible way to prevent users from... High Unreviewed
CVE-2023-21121 was published Jun 15, 2023
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due... High Unreviewed
CVE-2023-21138 was published Jun 15, 2023
In multiple functions of multiple files, there is a possible way to make the device unusable due... Moderate Unreviewed
CVE-2023-21143 was published Jun 15, 2023
Magento Open Source affected by Improper Input Validation Low
CVE-2023-29293 was published for magento/community-edition (Composer) Jun 15, 2023
Grav Server-side Template Injection (SSTI) via Twig Default Filters High
CVE-2023-34448 was published for getgrav/grav (Composer) Jun 16, 2023
jacobsoo
Vega's validators able to submit duplicate transactions Moderate
CVE-2023-35163 was published for code.vegaprotocol.io/vega (Go) Jun 20, 2023
wwestgarth
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper... High Unreviewed
CVE-2023-0026 was published Jun 21, 2023
When using local accounts for administration, the redirect url parameter was not encoded... Moderate Unreviewed
CVE-2023-28800 was published Jun 22, 2023
A URL parameter during login flow was vulnerable to injection. An attacker could insert a... Moderate Unreviewed
CVE-2023-28799 was published Jun 22, 2023
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the... High Unreviewed
CVE-2023-32463 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-25936 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-28041 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-28033 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-28042 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-28039 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-28040 was published Jun 23, 2023
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... Moderate Unreviewed
CVE-2023-28054 was published Jun 23, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database