GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
      29,945 advisories
        Filter by severity
        
      
      
    
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62982
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62948
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62949
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62951
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62963
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62967
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62968
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62969
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62971
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62974
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62984
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62985
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62983
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62987
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62921
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62930
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62940
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62939
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62943
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62942
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62941
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62911
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62910
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62907
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-62917
                      
                      was published
                      Oct 27, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API