Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,820
Erlang
36
GitHub Actions
32
Go
2,412
Maven
5,000+
npm
4,050
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,004
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4,524 advisories

Loading
Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on... High Unreviewed
CVE-2025-4613 was published Jun 12, 2025
uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2... High Unreviewed
CVE-2025-54564 was published Aug 1, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-56132 was published Feb 5, 2025
A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds... High Unreviewed
CVE-2011-10008 was published Jul 31, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-8755 was published Oct 11, 2024
A denial-of-service issue was addressed with improved input validation. This issue is fixed in... High Unreviewed
CVE-2025-43223 was published Jul 30, 2025
A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer... High Unreviewed
CVE-2025-4600 was published May 16, 2025
Improper Input Validation in the processing of user-supplied splash screen during system boot in... High Unreviewed
CVE-2023-5058 was published Dec 8, 2023
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary... High Unreviewed
CVE-2025-50492 was published Jul 28, 2025
Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student... High Unreviewed
CVE-2025-50489 was published Jul 28, 2025
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car... High Unreviewed
CVE-2025-50494 was published Jul 28, 2025
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student... High Unreviewed
CVE-2025-50490 was published Jul 28, 2025
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor... High Unreviewed
CVE-2025-50493 was published Jul 28, 2025
A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives.... High Unreviewed
CVE-2014-125119 was published Jul 25, 2025
A stack-based buffer overflow vulnerability exists in i-Ftp version 2.20 due to improper handling... High Unreviewed
CVE-2014-125114 was published Jul 25, 2025
An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through... High Unreviewed
CVE-2019-11687 was published May 24, 2022
A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an... High Unreviewed
CVE-2019-1841 was published May 13, 2022
The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all... High Unreviewed
CVE-2025-6585 was published Jul 22, 2025
A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod... High Unreviewed
CVE-2025-34124 was published Jul 17, 2025
A command injection vulnerability exists in LILIN LILIN Digital Video Recorder (DVR) devices... High Unreviewed
CVE-2025-34129 was published Jul 17, 2025
A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when... High Unreviewed
CVE-2025-34123 was published Jul 16, 2025
A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07,... High Unreviewed
CVE-2025-34118 was published Jul 16, 2025
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204... High Unreviewed
CVE-2025-6558 was published Jul 15, 2025
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate... High Unreviewed
CVE-2024-42516 was published Jul 10, 2025
Import functionality is vulnerable to DNS rebinding attacks between verification and processing... High Unreviewed
CVE-2024-36471 was published Jun 11, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database