GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,722
Erlang
35
GitHub Actions
29
Go
2,306
Maven
5,000+
npm
3,947
NuGet
711
pip
3,727
Pub
12
RubyGems
920
Rust
964
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
130 advisories
Filter by severity
A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical....
High
Unreviewed
CVE-2025-5196
was published
May 26, 2025
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a...
High
Unreviewed
CVE-2025-33103
was published
May 17, 2025
Execution with Unnecessary Privileges vulnerability in the Pager agent of multi-agent...
Moderate
Unreviewed
CVE-2025-0921
was published
May 16, 2025
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or
series 5 prior to v9.0...
High
Unreviewed
CVE-2025-3925
was published
May 7, 2025
Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability...
High
Unreviewed
CVE-2024-6030
was published
Apr 30, 2025
CWE-250: Execution with Unnecessary Privileges
High
Unreviewed
CVE-2025-23180
was published
Apr 29, 2025
CWE-250: Execution with Unnecessary Privileges
High
Unreviewed
CVE-2025-23181
was published
Apr 29, 2025
IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local...
High
Unreviewed
CVE-2025-1951
was published
Apr 22, 2025
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™...
High
Unreviewed
CVE-2025-0120
was published
Apr 11, 2025
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit)...
Moderate
Unreviewed
CVE-2025-23009
was published
Apr 10, 2025
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64...
High
Unreviewed
CVE-2025-23008
was published
Apr 10, 2025
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers...
Critical
Unreviewed
CVE-2025-3364
was published
Apr 8, 2025
A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability...
Moderate
Unreviewed
CVE-2024-11821
was published
Mar 20, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an...
High
Unreviewed
CVE-2024-48013
was published
Mar 17, 2025
Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability...
High
Unreviewed
CVE-2024-2240
was published
Feb 14, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0...
Moderate
Unreviewed
CVE-2024-8266
was published
Feb 13, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0...
Critical
Unreviewed
CVE-2024-7102
was published
Feb 13, 2025
An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo...
High
Unreviewed
CVE-2024-12673
was published
Feb 12, 2025
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...
High
Unreviewed
CVE-2024-21924
was published
Feb 11, 2025
Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x...
Moderate
Unreviewed
CVE-2025-22890
was published
Feb 6, 2025
IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated...
High
Unreviewed
CVE-2024-49814
was published
Feb 6, 2025
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS...
Low
Unreviewed
CVE-2025-20185
was published
Feb 5, 2025
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes...
Moderate
Unreviewed
CVE-2023-37412
was published
Jan 29, 2025
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges...
High
Unreviewed
CVE-2024-47978
was published
Dec 25, 2024
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate...
High
Unreviewed
CVE-2024-35141
was published
Dec 19, 2024
ProTip!
Advisories are also available from the
GraphQL API