Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,825
Erlang
36
GitHub Actions
32
Go
2,416
Maven
5,000+
npm
4,054
NuGet
723
pip
3,845
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+

12,264 advisories

Loading
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). ... Low Unreviewed
CVE-2025-50100 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... Low Unreviewed
CVE-2025-50098 was published Jul 15, 2025
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ... Low Unreviewed
CVE-2025-50081 was published Jul 15, 2025
Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. ... Low Unreviewed
CVE-2025-50066 was published Jul 15, 2025
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component:... Low Unreviewed
CVE-2025-30752 was published Jul 15, 2025
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). ... Low Unreviewed
CVE-2025-50065 was published Jul 15, 2025
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that... Low Unreviewed
CVE-2025-30750 was published Jul 15, 2025
The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules)... Low Unreviewed
CVE-2025-7672 was published Jul 15, 2025
AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections Low
CVE-2025-53643 was published for aiohttp (pip) Jul 14, 2025
JeppW
A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has... Low Unreviewed
CVE-2025-7578 was published Jul 14, 2025
static-alloc vulnerability leads to uninitialized read after allocating MemBump Low
GHSA-xrrq-rrgq-h89w was published for static-alloc (Rust) Jul 11, 2025
A flaw was found in Ansible. Three API endpoints are accessible and return verbose,... Low Unreviewed
CVE-2025-53862 was published Jul 11, 2025
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels... Low Unreviewed
CVE-2025-53861 was published Jul 11, 2025
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a... Low Unreviewed
CVE-2025-5992 was published Jul 11, 2025
Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated... Low Unreviewed
CVE-2025-49462 was published Jul 10, 2025
Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the... Low Unreviewed
CVE-2025-27889 was published Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1... Low Unreviewed
CVE-2025-6168 was published Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1... Low Unreviewed
CVE-2025-4972 was published Jul 10, 2025
In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about... Low Unreviewed
CVE-2023-50458 was published Jul 10, 2025
Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users Low
CVE-2025-53678 was published for io.jenkins.plugins:user1st-utester (Maven) Jul 9, 2025
Jenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form Low
CVE-2025-53661 was published for io.jenkins.plugins:testsigma (Maven) Jul 9, 2025
Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points Low
GHSA-phhq-63jg-fp7r was published for github.com/edgelesssys/contrast (Go) Jul 9, 2025
burgerdev katexochen
thomasten
A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to... Low Unreviewed
CVE-2025-7215 was published Jul 9, 2025
A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected... Low Unreviewed
CVE-2025-7214 was published Jul 9, 2025
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Access... Low Unreviewed
CVE-2025-49546 was published Jul 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database