Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,768
Erlang
35
GitHub Actions
29
Go
2,332
Maven
5,000+
npm
3,965
NuGet
713
pip
3,748
Pub
12
RubyGems
921
Rust
975
Swift
38
Unreviewed advisories
All unreviewed
5,000+

11,245 advisories

Loading
Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an... Critical Unreviewed
CVE-2024-1244 was published Jun 11, 2025
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation... Low Unreviewed
CVE-2025-47096 was published Jun 11, 2025
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results Low
GHSA-2x5j-vhc8-9cwm was published for github.com/cloudflare/circl (Go) Jun 10, 2025
Improper input validation performed during the authentication process of FlashBlade could lead to... High Unreviewed
CVE-2025-0052 was published Jun 10, 2025
Improper input validation performed during the authentication process of FlashArray could lead to... High Unreviewed
CVE-2025-0051 was published Jun 10, 2025
Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate... High Unreviewed
CVE-2025-47968 was published Jun 10, 2025
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute... Moderate Unreviewed
CVE-2025-47171 was published Jun 10, 2025
GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF) Critical
CVE-2024-34711 was published for org.geoserver.main:gs-main (Maven) Jun 10, 2025
lemauanhphong jodygarnett
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an... High Unreviewed
CVE-2025-3116 was published Jun 10, 2025
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an... High Unreviewed
CVE-2025-3898 was published Jun 10, 2025
Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access... High Unreviewed
CVE-2025-4680 was published Jun 10, 2025
An improper input validation discovered in Avaya Call Management System could allow an... Critical Unreviewed
CVE-2025-1041 was published Jun 10, 2025
In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime... Moderate Unreviewed
CVE-2025-0037 was published Jun 10, 2025
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input. Low Unreviewed
CVE-2025-27242 was published Jun 8, 2025
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input. Moderate Unreviewed
CVE-2025-27131 was published Jun 8, 2025
A vulnerability classified as critical has been found in Shenzhen Dashi Tongzhou Information... Moderate Unreviewed
CVE-2025-5679 was published Jun 5, 2025
A vulnerability classified as critical was found in Shenzhen Dashi Tongzhou Information... Moderate Unreviewed
CVE-2025-5680 was published Jun 5, 2025
anon-vec lacks sufficient checks in public API Low
GHSA-pr59-jjr4-gcf6 was published for anon-vec (Rust) Jun 5, 2025
CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could... High Unreviewed
CVE-2025-1701 was published Jun 4, 2025
A vulnerability was found in ChestnutCMS up to 15.1. It has been declared as critical. This... Moderate Unreviewed
CVE-2025-5552 was published Jun 4, 2025
A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been declared as... Moderate Unreviewed
CVE-2025-5497 was published Jun 3, 2025
A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical.... Moderate Unreviewed
CVE-2025-5498 was published Jun 3, 2025
A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8.... Moderate Unreviewed
CVE-2025-5499 was published Jun 3, 2025
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in... High Unreviewed
CVE-2025-5455 was published Jun 2, 2025
A malicious user with administrative privileges in the web portal would be able to manipulate the... Moderate Unreviewed
CVE-2025-4635 was published May 30, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database