GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,894
Erlang
38
GitHub Actions
38
Go
2,552
Maven
5,000+
npm
4,224
NuGet
746
pip
3,999
Pub
12
RubyGems
953
Rust
1,041
Swift
45
Unreviewed advisories
All unreviewed
5,000+
112,524 advisories
Filter by severity
Memory corruption while processing an escape call.
High
Unreviewed
CVE-2025-47349
was published
Oct 9, 2025
Memory corruption while processing user buffers.
High
Unreviewed
CVE-2025-47351
was published
Oct 9, 2025
Memory corruption while invoking remote procedure IOCTL calls.
High
Unreviewed
CVE-2025-47355
was published
Oct 9, 2025
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
High
Unreviewed
CVE-2025-47342
was published
Oct 9, 2025
memory corruption while processing an image encoding completion event.
High
Unreviewed
CVE-2025-47341
was published
Oct 9, 2025
Memory corruption while processing IOCTL call to get the mapping.
High
Unreviewed
CVE-2025-47340
was published
Oct 9, 2025
Memory corruption while processing control commands in the virtual memory management interface.
High
Unreviewed
CVE-2025-47347
was published
Oct 9, 2025
The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for...
High
Unreviewed
CVE-2025-6038
was published
Oct 9, 2025
Memory corruption while processing a malformed license file during reboot.
High
Unreviewed
CVE-2025-27054
was published
Oct 9, 2025
Memory corruption while processing camera platform driver IOCTL calls.
High
Unreviewed
CVE-2025-27048
was published
Oct 9, 2025
Memory corruption during PlayReady APP usecase while processing TA commands.
High
Unreviewed
CVE-2025-27053
was published
Oct 9, 2025
Memory corruption while performing SCM call with malformed inputs.
High
Unreviewed
CVE-2025-27060
was published
Oct 9, 2025
Memory corruption while performing SCM call.
High
Unreviewed
CVE-2025-27059
was published
Oct 9, 2025
A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the...
High
Unreviewed
CVE-2025-11524
was published
Oct 9, 2025
A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown...
High
Unreviewed
CVE-2025-11527
was published
Oct 9, 2025
A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the...
High
Unreviewed
CVE-2025-11528
was published
Oct 9, 2025
The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
High
Unreviewed
CVE-2025-10496
was published
Oct 9, 2025
A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function...
High
Unreviewed
CVE-2025-11526
was published
Oct 9, 2025
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the...
High
Unreviewed
CVE-2025-11525
was published
Oct 9, 2025
MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install...
High
Unreviewed
CVE-2025-11535
was published
Oct 9, 2025
ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in...
High
Unreviewed
CVE-2025-60311
was published
Oct 8, 2025
An issue in the permission verification module and organization/application editing interface in...
High
Unreviewed
CVE-2025-61524
was published
Oct 8, 2025
An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows...
High
Unreviewed
CVE-2025-57457
was published
Oct 8, 2025
FlowiseAI/Flosise has File Upload vulnerability
High
CVE-2025-61687
was published
for
flowise
(npm)
Oct 8, 2025
Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x...
High
Unreviewed
CVE-2025-9868
was published
Oct 8, 2025
ProTip!
Advisories are also available from the
GraphQL API