GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
9,593 advisories
Filter by severity
A permissions issue was addressed with additional restrictions. This issue is fixed in iPadOS 17...
Moderate
Unreviewed
CVE-2025-24220
was published
May 13, 2025
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3,...
Moderate
Unreviewed
CVE-2025-24155
was published
May 13, 2025
Liferay Portal and Liferay DXP Fails to Sanitize API Data
Moderate
CVE-2020-13444
was published
for
com.liferay.portal:release.dxp.bom
(Maven)
May 24, 2022
A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which...
Moderate
Unreviewed
CVE-2024-0340
was published
Jan 9, 2024
An information disclosure issue was addressed with improved privacy controls. This issue is fixed...
Moderate
Unreviewed
CVE-2025-31236
was published
May 13, 2025
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15...
High
Unreviewed
CVE-2025-31256
was published
May 13, 2025
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and...
High
Unreviewed
CVE-2025-31225
was published
May 13, 2025
Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software...
Moderate
Unreviewed
CVE-2025-22895
was published
May 13, 2025
Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software...
Moderate
Unreviewed
CVE-2025-20624
was published
May 13, 2025
Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software...
Moderate
Unreviewed
CVE-2025-20611
was published
May 13, 2025
Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software...
Low
Unreviewed
CVE-2025-20030
was published
May 13, 2025
Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software...
Moderate
Unreviewed
CVE-2025-20013
was published
May 13, 2025
A privacy issue was addressed by removing sensitive data. This issue is fixed in iPadOS 17.7.7,...
Moderate
Unreviewed
CVE-2025-31220
was published
May 13, 2025
The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
Moderate
Unreviewed
CVE-2025-4222
was published
May 3, 2025
Insufficient granularity of access control in Visual Studio allows an authorized attacker to...
Moderate
Unreviewed
CVE-2025-32703
was published
May 13, 2025
A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio...
Moderate
Unreviewed
CVE-2025-4535
was published
May 11, 2025
A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management...
Moderate
Unreviewed
CVE-2025-4536
was published
May 11, 2025
A vulnerability, which was classified as problematic, was found in Dígitro NGC Explorer 3.44.15....
Moderate
Unreviewed
CVE-2025-4526
was published
May 11, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Ventura...
Moderate
Unreviewed
CVE-2025-31191
was published
Apr 1, 2025
Out-of-bounds data read vulnerability in the authorization module
Impact: Successful exploitation...
Moderate
Unreviewed
CVE-2025-46591
was published
May 6, 2025
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
Moderate
CVE-2022-31684
was published
for
io.projectreactor.netty:reactor-netty-http
(Maven)
Oct 20, 2022
Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access...
Moderate
Unreviewed
CVE-2022-41707
was published
Oct 19, 2022
Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Moderate
CVE-2013-4522
was published
for
moodle/moodle
(Composer)
May 13, 2022
Path traversal vulnerability in the DFS module
Impact: Successful exploitation of this...
Moderate
Unreviewed
CVE-2025-31174
was published
Apr 7, 2025
Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This...
High
Unreviewed
CVE-2025-0472
was published
Jan 16, 2025
ProTip!
Advisories are also available from the
GraphQL API