Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,785
Erlang
36
GitHub Actions
29
Go
2,368
Maven
5,000+
npm
3,988
NuGet
720
pip
3,779
Pub
12
RubyGems
926
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,198 advisories

Loading
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload... Critical Unreviewed
CVE-2025-42999 was published May 13, 2025
The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java... Low Unreviewed
CVE-2025-30012 was published May 13, 2025
An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation... Moderate Unreviewed
CVE-2025-46738 was published May 12, 2025
Microsoft Dataverse Remote Code Execution Vulnerability High Unreviewed
CVE-2025-47732 was published May 9, 2025
Deserialization of Untrusted Data vulnerability in Florent Maillefaud WP Maintenance allows... High Unreviewed
CVE-2025-47683 was published May 7, 2025
Deserialization of Untrusted Data vulnerability in Mario Peshev WP-CRM System allows Object... High Unreviewed
CVE-2025-47629 was published May 7, 2025
The PGS Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,... Critical Unreviewed
CVE-2025-0855 was published May 7, 2025
NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an... High Unreviewed
CVE-2025-23254 was published May 1, 2025
GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote... High Unreviewed
CVE-2025-34491 was published Apr 28, 2025
GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A... High Unreviewed
CVE-2025-34489 was published Apr 28, 2025
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on... Low Unreviewed
CVE-2023-35815 was published Apr 28, 2025
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms. Low Unreviewed
CVE-2023-35814 was published Apr 28, 2025
The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up... High Unreviewed
CVE-2025-2105 was published Apr 26, 2025
Deserialization of Untrusted Data vulnerability in Michael Cannon Flickr Shortcode Importer... High Unreviewed
CVE-2025-46481 was published Apr 24, 2025
Deserialization of Untrusted Data vulnerability in djjmz Social Counter allows Object Injection.... High Unreviewed
CVE-2025-46473 was published Apr 24, 2025
NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of... High Unreviewed
CVE-2025-23249 was published Apr 22, 2025
Deserialization of Untrusted Data vulnerability in Mahmudul Hasan Arif FluentBoards allows Object... Critical Unreviewed
CVE-2025-39551 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in Shahjahan Jewel FluentCommunity allows Object... Critical Unreviewed
CVE-2025-39550 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in bdthemes Ultimate Store Kit Elementor Addons... Critical Unreviewed
CVE-2025-39588 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in bestwebsoft Rating by BestWebSoft allows... High Unreviewed
CVE-2025-39527 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in WP Speedo Team Members allows Object Injection... High Unreviewed
CVE-2025-32686 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in Stylemix uListing allows Object Injection.... High Unreviewed
CVE-2025-32662 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer allows Object... High Unreviewed
CVE-2025-32647 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in wpWax HelpGent allows Object Injection. This... Critical Unreviewed
CVE-2025-32658 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in turitop TuriTop Booking System allows Object... High Unreviewed
CVE-2025-32571 was published Apr 17, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database