GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,780
Erlang
36
GitHub Actions
29
Go
2,344
Maven
5,000+
npm
3,973
NuGet
719
pip
3,770
Pub
12
RubyGems
923
Rust
978
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
712 advisories
Filter by severity
An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system...
Critical
Unreviewed
CVE-2025-25038
was published
Jun 20, 2025
An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and...
Critical
Unreviewed
CVE-2025-34024
was published
Jun 20, 2025
An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot...
Critical
Unreviewed
CVE-2025-34030
was published
Jun 20, 2025
Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an...
Critical
Unreviewed
CVE-2024-1244
was published
Jun 11, 2025
An improper input validation discovered in
Avaya Call Management System
could allow an...
Critical
Unreviewed
CVE-2025-1041
was published
Jun 10, 2025
Cryptographic vulnerability in Iridium Certus 700. This vulnerability allows a user to retrieve...
Critical
Unreviewed
CVE-2025-41377
was published
May 23, 2025
ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input...
Critical
Unreviewed
CVE-2025-43560
was published
May 13, 2025
ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input...
Critical
Unreviewed
CVE-2025-43559
was published
May 13, 2025
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that...
Critical
Unreviewed
CVE-2025-1087
was published
May 9, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows...
Critical
Unreviewed
CVE-2025-32073
was published
Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments...
Critical
Unreviewed
CVE-2025-32079
was published
Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth...
Critical
Unreviewed
CVE-2025-32067
was published
Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media...
Critical
Unreviewed
CVE-2025-32069
was published
Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll...
Critical
Unreviewed
CVE-2025-32070
was published
Apr 11, 2025
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata...
Critical
Unreviewed
CVE-2025-32071
was published
Apr 11, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input...
Critical
Unreviewed
CVE-2025-24446
was published
Apr 8, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS...
Critical
Unreviewed
CVE-2025-30452
was published
Apr 1, 2025
Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate...
Critical
Unreviewed
CVE-2025-29814
was published
Mar 21, 2025
A vulnerability in ollama/ollama version 0.1.37 allows for remote code execution (RCE) due to...
Critical
Unreviewed
CVE-2024-7773
was published
Mar 20, 2025
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9),...
Critical
Unreviewed
CVE-2025-27494
was published
Mar 11, 2025
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9),...
Critical
Unreviewed
CVE-2025-27493
was published
Mar 11, 2025
Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.
Critical
Unreviewed
CVE-2024-36047
was published
Feb 28, 2025
A security vulnerability has been identified in the IBL Software Engineering Visual Weather and...
Critical
Unreviewed
CVE-2025-1077
was published
Feb 7, 2025
SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on...
Critical
Unreviewed
CVE-2024-47857
was published
Jan 31, 2025
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and...
Critical
Unreviewed
CVE-2024-11737
was published
Dec 11, 2024
ProTip!
Advisories are also available from the
GraphQL API