GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
131,093 advisories
Filter by severity
The Simple Downloads List plugin for WordPress is vulnerable to unauthorized modification of data...
Moderate
Unreviewed
CVE-2025-12583
was published
Nov 8, 2025
Potential Denial of Service issue in all supported versions of Revenera InstallShield version...
Moderate
Unreviewed
CVE-2025-12418
was published
Nov 8, 2025
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory...
Moderate
Unreviewed
CVE-2025-7700
was published
Nov 7, 2025
A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows...
Moderate
Unreviewed
CVE-2025-61261
was published
Nov 7, 2025
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function...
Moderate
Unreviewed
CVE-2025-12875
was published
Nov 7, 2025
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and...
Moderate
Unreviewed
CVE-2025-36135
was published
Nov 7, 2025
Improper resource management in firmware of some Solidigm DC Products may allow an attacker with...
Moderate
Unreviewed
CVE-2025-12902
was published
Nov 7, 2025
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes...
Moderate
Unreviewed
CVE-2025-36136
was published
Nov 7, 2025
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes...
Moderate
Unreviewed
CVE-2025-36008
was published
Nov 7, 2025
IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could...
Moderate
Unreviewed
CVE-2025-36185
was published
Nov 7, 2025
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0...
Moderate
Unreviewed
CVE-2025-33012
was published
Nov 7, 2025
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0...
Moderate
Unreviewed
CVE-2024-47118
was published
Nov 7, 2025
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX...
Moderate
Unreviewed
CVE-2025-2534
was published
Nov 7, 2025
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX...
Moderate
Unreviewed
CVE-2025-36131
was published
Nov 7, 2025
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0...
Moderate
Unreviewed
CVE-2025-36006
was published
Nov 7, 2025
Improper resource management in firmware of some Solidigm DC Products may allow an attacker with...
Moderate
Unreviewed
CVE-2025-12896
was published
Nov 7, 2025
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an...
Moderate
Unreviewed
CVE-2025-12873
was published
Nov 7, 2025
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker...
Moderate
Unreviewed
CVE-2025-57712
was published
Nov 7, 2025
A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by...
Moderate
Unreviewed
CVE-2025-12862
was published
Nov 7, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
Moderate
Unreviewed
CVE-2025-7719
was published
Nov 7, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect...
Moderate
Unreviewed
CVE-2025-53409
was published
Nov 7, 2025
A NULL pointer dereference vulnerability has been reported to affect several product versions. If...
Moderate
Unreviewed
CVE-2025-47207
was published
Nov 7, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect...
Moderate
Unreviewed
CVE-2025-53410
was published
Nov 7, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect...
Moderate
Unreviewed
CVE-2025-53413
was published
Nov 7, 2025
A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an...
Moderate
Unreviewed
CVE-2025-12861
was published
Nov 7, 2025
ProTip!
Advisories are also available from the
GraphQL API