Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,691
Erlang
34
GitHub Actions
27
Go
2,276
Maven
5,000+
npm
3,931
NuGet
708
pip
3,699
Pub
12
RubyGems
919
Rust
957
Swift
38
Unreviewed advisories
All unreviewed
5,000+

107,420 advisories

Loading
Violation of Secure Design Principles, Hidden Functionality, Incorrect Provision of Specified... High Unreviewed
CVE-2025-0020 was published May 14, 2025
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists... High Unreviewed
CVE-2025-2875 was published May 14, 2025
The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions... High Unreviewed
CVE-2025-3623 was published May 14, 2025
Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability... High Unreviewed
CVE-2025-43571 was published May 13, 2025
Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and... High Unreviewed
CVE-2025-24308 was published May 13, 2025
Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability... High Unreviewed
CVE-2025-43549 was published May 13, 2025
Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™... High Unreviewed
CVE-2025-22843 was published May 13, 2025
ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect... High Unreviewed
CVE-2025-43565 was published May 13, 2025
Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R)... High Unreviewed
CVE-2025-22892 was published May 13, 2025
Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability... High Unreviewed
CVE-2025-43570 was published May 13, 2025
Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write... High Unreviewed
CVE-2025-43554 was published May 13, 2025
Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that... High Unreviewed
CVE-2025-43548 was published May 13, 2025
Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability... High Unreviewed
CVE-2025-43568 was published May 13, 2025
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path... High Unreviewed
CVE-2025-43553 was published May 13, 2025
Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that... High Unreviewed
CVE-2025-43572 was published May 13, 2025
Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds write... High Unreviewed
CVE-2025-43569 was published May 13, 2025
Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100... High Unreviewed
CVE-2025-20062 was published May 13, 2025
Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged... High Unreviewed
CVE-2025-20083 was published May 13, 2025
Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R)... High Unreviewed
CVE-2025-20082 was published May 13, 2025
Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and... High Unreviewed
CVE-2025-21094 was published May 13, 2025
Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before... High Unreviewed
CVE-2025-20618 was published May 13, 2025
Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6... High Unreviewed
CVE-2025-20100 was published May 13, 2025
Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver... High Unreviewed
CVE-2025-20003 was published May 13, 2025
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23... High Unreviewed
CVE-2025-20026 was published May 13, 2025
Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon... High Unreviewed
CVE-2025-20004 was published May 13, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database