Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,795
Erlang
36
GitHub Actions
29
Go
2,380
Maven
5,000+
npm
4,005
NuGet
720
pip
3,804
Pub
12
RubyGems
927
Rust
986
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,712 advisories

Loading
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels... Low Unreviewed
CVE-2025-53861 was published Jul 11, 2025
A flaw was found in Ansible. Three API endpoints are accessible and return verbose,... Low Unreviewed
CVE-2025-53862 was published Jul 11, 2025
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a... Low Unreviewed
CVE-2025-5992 was published Jul 11, 2025
Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated... Low Unreviewed
CVE-2025-49462 was published Jul 10, 2025
Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the... Low Unreviewed
CVE-2025-27889 was published Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1... Low Unreviewed
CVE-2025-6168 was published Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1... Low Unreviewed
CVE-2025-4972 was published Jul 10, 2025
In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about... Low Unreviewed
CVE-2023-50458 was published Jul 10, 2025
A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected... Low Unreviewed
CVE-2025-7214 was published Jul 9, 2025
A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to... Low Unreviewed
CVE-2025-7215 was published Jul 9, 2025
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Access... Low Unreviewed
CVE-2025-49546 was published Jul 8, 2025
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an... Low Unreviewed
CVE-2025-49731 was published Jul 8, 2025
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an... Low Unreviewed
CVE-2025-49756 was published Jul 8, 2025
External control of file name or path in Windows Storage allows an authorized attacker to perform... Low Unreviewed
CVE-2025-49760 was published Jul 8, 2025
A transient execution vulnerability in some AMD processors may allow a user process to infer the... Low Unreviewed
CVE-2024-36348 was published Jul 8, 2025
A transient execution vulnerability in some AMD processors may allow a user process to infer... Low Unreviewed
CVE-2024-36349 was published Jul 8, 2025
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Low Unreviewed
CVE-2025-24474 was published Jul 8, 2025
The widely used component that establishes outbound TLS connections in SAP NetWeaver Application... Low Unreviewed
CVE-2025-42978 was published Jul 8, 2025
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high... Low Unreviewed
CVE-2025-42954 was published Jul 8, 2025
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform... Low Unreviewed
CVE-2025-20325 was published Jul 7, 2025
Stack overflow risk when vector images are parsed during file preview Impact: Successful... Low Unreviewed
CVE-2025-53176 was published Jul 7, 2025
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of... Low Unreviewed
CVE-2025-53177 was published Jul 7, 2025
A vulnerability was found in Monitorr up to 1.7.6m. It has been classified as problematic. This... Low Unreviewed
CVE-2025-7060 was published Jul 4, 2025
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly... Low Unreviewed
CVE-2025-0885 was published Jul 3, 2025
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that... Low Unreviewed
CVE-2025-6943 was published Jul 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database