Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,819
Erlang
36
GitHub Actions
32
Go
2,410
Maven
5,000+
npm
4,046
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4,692 advisories

Loading
Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation... Moderate Unreviewed
CVE-2025-30480 was published Jul 30, 2025
The vulnerability was identified in the code developed specifically for Lenovo. Please visit ... Moderate Unreviewed
CVE-2025-4424 was published Jul 30, 2025
An issue existed in the handling of environment variables. This issue was addressed with improved... Moderate Unreviewed
CVE-2025-43195 was published Jul 30, 2025
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical.... Moderate Unreviewed
CVE-2025-8266 was published Jul 28, 2025
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical.... Moderate Unreviewed
CVE-2025-8227 was published Jul 27, 2025
The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to... Moderate Unreviewed
CVE-2025-8097 was published Jul 26, 2025
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft... Moderate Unreviewed
CVE-2025-53771 was published Jul 21, 2025
A vulnerability classified as critical was found in Metasoft 美特软件 MetaCRM up to 6.4.2. This... Moderate Unreviewed
CVE-2025-7876 was published Jul 20, 2025
Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to... Moderate Unreviewed
CVE-2025-47182 was published Jul 11, 2025
Emerson ValveLink products receive input or data, but it do not validate or incorrectly ... Moderate Unreviewed
CVE-2025-53471 was published Jul 11, 2025
Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission... Moderate Unreviewed
CVE-2025-44526 was published Jul 9, 2025
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS... Moderate Unreviewed
CVE-2025-7378 was published Jul 9, 2025
A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This... Moderate Unreviewed
CVE-2025-7216 was published Jul 9, 2025
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations... Moderate Unreviewed
CVE-2025-24002 was published Jul 8, 2025
A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical.... Moderate Unreviewed
CVE-2025-7099 was published Jul 7, 2025
Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds... Moderate Unreviewed
CVE-2025-53502 was published Jul 3, 2025
A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions... Moderate Unreviewed
CVE-2025-6563 was published Jul 3, 2025
Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows... Moderate Unreviewed
CVE-2025-27023 was published Jul 2, 2025
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers... Moderate Unreviewed
CVE-2025-53076 was published Jun 30, 2025
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This... Moderate Unreviewed
CVE-2025-53075 was published Jun 30, 2025
A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue... Moderate Unreviewed
CVE-2025-5878 was published Jun 29, 2025
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results... Moderate Unreviewed
CVE-2023-28911 was published Jun 28, 2025
ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This... Moderate Unreviewed
CVE-2025-6444 was published Jun 26, 2025
A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version... Moderate Unreviewed
CVE-2025-34032 was published Jun 26, 2025
Improper Input Validation vulnerability in Profisee on Windows (filesystem modules) allows Path... Moderate Unreviewed
CVE-2025-6240 was published Jun 18, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database