Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,785
Erlang
36
GitHub Actions
29
Go
2,358
Maven
5,000+
npm
3,979
NuGet
720
pip
3,777
Pub
12
RubyGems
924
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,500 advisories

Loading
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering... High Unreviewed
CVE-2025-39204 was published Jun 24, 2025
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3... High Unreviewed
CVE-2025-27827 was published Jun 26, 2025
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when... High Unreviewed
CVE-2025-6432 was published Jun 26, 2025
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. ... High Unreviewed
CVE-2024-45791 was published Nov 18, 2024
OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information... High Unreviewed
CVE-2025-27387 was published Jun 23, 2025
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual... High Unreviewed
CVE-2025-23173 was published Jun 19, 2025
An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2023-51142 was published Apr 11, 2024
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as command line argument. In... High Unreviewed
CVE-2020-36771 was published Jan 22, 2024
A remote unauthorized attacker may gather sensitive information of the application, due to... High Unreviewed
CVE-2025-49184 was published Jun 12, 2025
When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the... High Unreviewed
CVE-2025-26521 was published Jun 11, 2025
In the module "Mailjet" (mailjet) from Mailjet for PrestaShop before versions 3.5.1, a guest can... High Unreviewed
CVE-2024-24304 was published Feb 7, 2024
Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a... High Unreviewed
CVE-2024-22022 was published Feb 7, 2024
The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object... High Unreviewed
CVE-2023-50872 was published Apr 16, 2024
An isolated local disclosure of information and potential isolated local arbitrary code execution... High Unreviewed
CVE-2022-28638 was published Sep 21, 2022
Exposure of private personal information to an unauthorized actor in the user vaults component of... High Unreviewed
CVE-2025-5334 was published May 29, 2025
An unauthenticated remote attacker can access information about running processes via the SNMP... High Unreviewed
CVE-2025-41654 was published May 26, 2025
Medtronic 2090 CareLink Programmer all versions The affected product uses a virtual private... High Unreviewed
CVE-2018-10596 was published May 13, 2022
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted... High Unreviewed
CVE-2024-53359 was published May 20, 2025
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the... High Unreviewed
CVE-2019-1019 was published May 24, 2022
VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with... High Unreviewed
CVE-2025-41230 was published May 20, 2025
The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all... High Unreviewed
CVE-2024-13613 was published May 17, 2025
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf... High Unreviewed
CVE-2025-3877 was published May 14, 2025
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5... High Unreviewed
CVE-2025-31207 was published May 13, 2025
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15... High Unreviewed
CVE-2025-31256 was published May 13, 2025
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and... High Unreviewed
CVE-2025-31225 was published May 13, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database