Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,822
Erlang
36
GitHub Actions
32
Go
2,413
Maven
5,000+
npm
4,052
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+

394 advisories

Loading
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious... High Unreviewed
CVE-2025-22218 was published Jan 30, 2025
druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability Low
CVE-2024-45384 was published for org.apache.druid.extensions:druid-pac4j (Maven) Sep 17, 2024
In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles... Low Unreviewed
CVE-2025-31141 was published Mar 27, 2025
An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via... Moderate Unreviewed
CVE-2024-30614 was published Apr 12, 2024
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive... Low Unreviewed
CVE-2024-55895 was published Mar 29, 2025
Apache Tomcat Leaks Information via Error Message Moderate
CVE-2002-2008 was published for org.apache.tomcat:tomcat (Maven) Apr 30, 2022
Apache Tomcat Leaks Pathname Information via Error Message Moderate
CVE-2002-2009 was published for org.apache.tomcat:tomcat (Maven) Apr 30, 2022
HCL Traveler generates some error messages that provide detailed information about errors and... Moderate Unreviewed
CVE-2025-0279 was published Apr 4, 2025
API Platform Core can leak exceptions message that may contain sensitive information Moderate
CVE-2023-47639 was published for api-platform/core (Composer) Apr 3, 2025
Generation of Error Message Containing Sensitive Information vulnerability in vcita Online... Moderate Unreviewed
CVE-2025-32238 was published Apr 4, 2025
TYPO3 leaks a hash secret in an error message Moderate
CVE-2009-0815 was published for typo3/cms (Composer) May 2, 2022
An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9... Moderate Unreviewed
CVE-2024-11129 was published Apr 10, 2025
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP... Moderate Unreviewed
CVE-2010-3332 was published May 13, 2022
When importing resources using Web Workers, error messages would distinguish the difference... Moderate Unreviewed
CVE-2022-22760 was published Dec 22, 2022
A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to... Moderate Unreviewed
CVE-2025-20150 was published Apr 16, 2025
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of... Moderate Unreviewed
CVE-2017-0885 was published May 13, 2022
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution... Moderate Unreviewed
CVE-2016-9459 was published May 13, 2022
In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of... Low Unreviewed
CVE-2022-20525 was published Dec 20, 2022
Drupal Full Path Disclosure Moderate
CVE-2024-45440 was published for drupal/core (Composer) Aug 29, 2024
cmlara longwave
IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a... Moderate Unreviewed
CVE-2025-25045 was published Apr 24, 2025
There is an information disclosure vulnerability in the GoldenDB database product. Attackers can... Moderate Unreviewed
CVE-2025-46575 was published Apr 27, 2025
When a Web User without Create permission on subfolders attempts to upload a file to a non... Low Unreviewed
CVE-2025-0049 was published Apr 28, 2025
Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive Information Moderate
CVE-2025-4166 was published for github.com/hashicorp/vault (Go) May 2, 2025
In affected versions of Octopus Server it is possible to reveal the existence of resources in a... Moderate Unreviewed
CVE-2022-2508 was published Oct 27, 2022
An administrator could discover another account's credentials. Moderate Unreviewed
CVE-2025-46746 was published May 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database