Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,825
Erlang
36
GitHub Actions
32
Go
2,416
Maven
5,000+
npm
4,054
NuGet
723
pip
3,845
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+

12,264 advisories

Loading
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an... Low Unreviewed
CVE-2025-49731 was published Jul 8, 2025
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an... Low Unreviewed
CVE-2025-49756 was published Jul 8, 2025
External control of file name or path in Windows Storage allows an authorized attacker to perform... Low Unreviewed
CVE-2025-49760 was published Jul 8, 2025
A transient execution vulnerability in some AMD processors may allow a user process to infer... Low Unreviewed
CVE-2024-36349 was published Jul 8, 2025
A transient execution vulnerability in some AMD processors may allow a user process to infer the... Low Unreviewed
CVE-2024-36348 was published Jul 8, 2025
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Low Unreviewed
CVE-2025-24474 was published Jul 8, 2025
The widely used component that establishes outbound TLS connections in SAP NetWeaver Application... Low Unreviewed
CVE-2025-42978 was published Jul 8, 2025
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high... Low Unreviewed
CVE-2025-42954 was published Jul 8, 2025
Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes Low
CVE-2025-53535 was published for better-auth (npm) Jul 7, 2025
mwlik imenyoo2
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform... Low Unreviewed
CVE-2025-20325 was published Jul 7, 2025
Transformers's Improper Input Validation vulnerability can be exploited through username injection Low
CVE-2025-3777 was published for transformers (pip) Jul 7, 2025
Stack overflow risk when vector images are parsed during file preview Impact: Successful... Low Unreviewed
CVE-2025-53176 was published Jul 7, 2025
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of... Low Unreviewed
CVE-2025-53177 was published Jul 7, 2025
A vulnerability was found in Monitorr up to 1.7.6m. It has been classified as problematic. This... Low Unreviewed
CVE-2025-7060 was published Jul 4, 2025
Next.js has a Cache poisoning vulnerability due to omission of the Vary header Low
CVE-2025-49005 was published for next (npm) Jul 3, 2025
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly... Low Unreviewed
CVE-2025-0885 was published Jul 3, 2025
The distributed engine of Secret Server versions 11.7.49 and earlier can be exploited during an... Low Unreviewed
CVE-2025-6942 was published Jul 2, 2025
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that... Low Unreviewed
CVE-2025-6943 was published Jul 2, 2025
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... Low Unreviewed
CVE-2025-53492 was published Jul 2, 2025
The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the... Low Unreviewed
CVE-2025-24334 was published Jul 2, 2025
Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message... Low Unreviewed
CVE-2025-24335 was published Jul 2, 2025
Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and... Low Unreviewed
CVE-2025-52463 was published Jul 2, 2025
The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of... Low Unreviewed
CVE-2025-4654 was published Jul 2, 2025
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the... Low Unreviewed
CVE-2025-32462 was published Jun 30, 2025
string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS) Low
CVE-2025-45143 was published for string-math (npm) Jun 30, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database