Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+

4,883 advisories

Loading
Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.... Moderate Unreviewed
CVE-2024-45478 was published Jan 22, 2025
Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop Moderate
CVE-2024-10846 was published for github.com/compose-spec/compose-go/v2 (Go) Jan 21, 2025
ahollmann idsulik
thaJeztah glours gbrindisi
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length Moderate
CVE-2025-23041 was published for Umbraco.Forms (NuGet) Jan 14, 2025
RGV2ZWxvcGVy
Windows Virtual Trusted Platform Module Denial of Service Vulnerability Moderate Unreviewed
CVE-2025-21284 was published Jan 14, 2025
Windows Virtual Trusted Platform Module Denial of Service Vulnerability Moderate Unreviewed
CVE-2025-21280 was published Jan 14, 2025
A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this... Moderate Unreviewed
CVE-2025-0465 was published Jan 14, 2025
Startup control vulnerability in the ability module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2024-54121 was published Jan 8, 2025
Improper Input Validation vulnerability in Management Program in TXOne Networks Portable... Moderate Unreviewed
CVE-2024-47934 was published Jan 8, 2025
Vulnerability of input parameters not being verified in the widget framework module Impact:... Moderate Unreviewed
CVE-2024-56437 was published Jan 8, 2025
A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by... Moderate Unreviewed
CVE-2024-13136 was published Jan 5, 2025
A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical.... Moderate Unreviewed
CVE-2024-12994 was published Dec 28, 2024
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a... Moderate Unreviewed
CVE-2024-47102 was published Dec 25, 2024
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on... Moderate Unreviewed
CVE-2024-41887 was published Dec 24, 2024
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on... Moderate Unreviewed
CVE-2024-41886 was published Dec 24, 2024
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2024-54108 was published Dec 12, 2024
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2024-54109 was published Dec 12, 2024
Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation... Moderate Unreviewed
CVE-2024-54101 was published Dec 12, 2024
Vulnerability of improper access control in the secure input module Impact: Successful... Moderate Unreviewed
CVE-2024-54100 was published Dec 12, 2024
Duplicate Advisory: cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs Moderate
CVE-2024-12401 was published for github.com/cert-manager/cert-manager (Go) Dec 12, 2024 • withdrawn
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Moderate Unreviewed
CVE-2024-49073 was published Dec 12, 2024
Windows Mobile Broadband Driver Information Disclosure Vulnerability Moderate Unreviewed
CVE-2024-49087 was published Dec 12, 2024
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input... Moderate Unreviewed
CVE-2024-45761 was published Dec 9, 2024
A vulnerability, which was classified as problematic, has been found in SourceCodester Phone... Moderate Unreviewed
CVE-2024-12353 was published Dec 9, 2024
A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified... Moderate Unreviewed
CVE-2024-12355 was published Dec 9, 2024
Improper Input Validation vulnerability in RestApp Inc. Online Ordering System allows Integer... Moderate Unreviewed
CVE-2024-7488 was published Dec 4, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database