Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,785
Erlang
36
GitHub Actions
29
Go
2,358
Maven
5,000+
npm
3,979
NuGet
720
pip
3,777
Pub
12
RubyGems
924
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

5,939 advisories

Loading
An attacker who enumerated resources from the WebCompat extension could have obtained a... Moderate Unreviewed
CVE-2025-6425 was published Jun 26, 2025
An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to... Moderate Unreviewed
CVE-2023-47298 was published Jun 23, 2025
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not... Moderate Unreviewed
CVE-2025-49177 was published Jun 17, 2025
The created backup files are unencrypted, making the application vulnerable for gathering... Moderate Unreviewed
CVE-2025-49200 was published Jun 12, 2025
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions... Moderate Unreviewed
CVE-2025-4798 was published Jun 11, 2025
In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A... Moderate Unreviewed
CVE-2025-30675 was published Jun 11, 2025
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an... Moderate Unreviewed
CVE-2025-43579 was published Jun 10, 2025
Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized... Moderate Unreviewed
CVE-2025-47969 was published Jun 10, 2025
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS... Moderate Unreviewed
CVE-2025-25250 was published Jun 10, 2025
Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an... Moderate Unreviewed
CVE-2025-40662 was published Jun 10, 2025
The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes,... Moderate Unreviewed
CVE-2025-25209 was published Jun 9, 2025
PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass... Moderate Unreviewed
CVE-2025-5690 was published Jun 5, 2025
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP),... Moderate Unreviewed
CVE-2025-20129 was published Jun 4, 2025
A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic.... Moderate Unreviewed
CVE-2025-5436 was published Jun 2, 2025
The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms... Moderate Unreviewed
CVE-2025-4659 was published May 30, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2025-31231 was published May 30, 2025
Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote... Moderate Unreviewed
CVE-2025-5281 was published May 27, 2025
Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55... Moderate Unreviewed
CVE-2025-5064 was published May 27, 2025
There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This... Moderate Unreviewed
CVE-2024-56193 was published May 27, 2025
Script elements loading cross-origin resources generated load and error events which leaked... Moderate Unreviewed
CVE-2025-5266 was published May 27, 2025
A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1.... Moderate Unreviewed
CVE-2025-5184 was published May 26, 2025
Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read... Moderate Unreviewed
CVE-2024-54188 was published May 22, 2025
A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as... Moderate Unreviewed
CVE-2025-4980 was published May 20, 2025
A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00... Moderate Unreviewed
CVE-2025-4977 was published May 20, 2025
A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as... Moderate Unreviewed
CVE-2025-4904 was published May 19, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database