Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,722
Erlang
35
GitHub Actions
29
Go
2,306
Maven
5,000+
npm
3,947
NuGet
711
pip
3,727
Pub
12
RubyGems
920
Rust
964
Swift
38
Unreviewed advisories
All unreviewed
5,000+

147 advisories

Loading
A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical.... High Unreviewed
CVE-2025-5196 was published May 26, 2025
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a... High Unreviewed
CVE-2025-33103 was published May 17, 2025
Execution with Unnecessary Privileges vulnerability in the Pager agent of multi-agent... Moderate Unreviewed
CVE-2025-0921 was published May 16, 2025
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)... Critical Unreviewed
CVE-2023-52030 was published Jan 11, 2024
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0... High Unreviewed
CVE-2025-3925 was published May 7, 2025
Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0... Critical Unreviewed
CVE-2022-44544 was published Nov 6, 2022
Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability... High Unreviewed
CVE-2024-6030 was published Apr 30, 2025
CWE-250: Execution with Unnecessary Privileges High Unreviewed
CVE-2025-23181 was published Apr 29, 2025
CWE-250: Execution with Unnecessary Privileges High Unreviewed
CVE-2025-23180 was published Apr 29, 2025
A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows... High Unreviewed
CVE-2022-43553 was published Dec 6, 2022
Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR Critical
CVE-2025-32445 was published for github.com/argoproj/argo-events (Go) Apr 14, 2025
thevilledev
IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local... High Unreviewed
CVE-2025-1951 was published Apr 22, 2025
Harden-Runner allows evasion of 'disable-sudo' policy Moderate
CVE-2025-32955 was published for step-security/harden-runner (GitHub Actions) Apr 22, 2025
loresuso darryk10
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™... High Unreviewed
CVE-2025-0120 was published Apr 11, 2025
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit)... Moderate Unreviewed
CVE-2025-23009 was published Apr 10, 2025
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64... High Unreviewed
CVE-2025-23008 was published Apr 10, 2025
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers... Critical Unreviewed
CVE-2025-3364 was published Apr 8, 2025
Tomcat uses trusted privileges when processing web.xml file Moderate
CVE-2003-0043 was published for org.apache.tomcat:tomcat (Maven) Apr 29, 2022
man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain... High Unreviewed
CVE-2018-25078 was published Jan 26, 2023
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... Low Unreviewed
CVE-2024-21003 was published Apr 17, 2024
A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability... Moderate Unreviewed
CVE-2024-11821 was published Mar 20, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an... High Unreviewed
CVE-2024-48013 was published Mar 17, 2025
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones). The supported... High Unreviewed
CVE-2024-20999 was published Apr 17, 2024
Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst.... High Unreviewed
CVE-2023-27010 was published Mar 13, 2023
Winlogon Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-43583 was published Oct 8, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database