GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,815
Erlang
36
GitHub Actions
32
Go
2,401
Maven
5,000+
npm
4,045
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
3,729 advisories
Filter by severity
The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via...
Critical
Unreviewed
CVE-2025-5954
was published
Aug 1, 2025
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to...
High
Unreviewed
CVE-2025-52289
was published
Jul 31, 2025
Keycloak Privilege Escalation Vulnerability in Admin Console (FGAPv2 Enabled)
Moderate
CVE-2025-7784
was published
for
org.keycloak:keycloak-services
(Maven)
Jul 30, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6,...
High
Unreviewed
CVE-2025-43249
was published
Jul 30, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia...
High
Unreviewed
CVE-2025-43256
was published
Jul 30, 2025
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6...
High
Unreviewed
CVE-2025-43248
was published
Jul 30, 2025
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-43199
was published
Jul 30, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2025-43188
was published
Jul 30, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia...
Critical
Unreviewed
CVE-2025-24119
was published
Jul 30, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2025-31243
was published
Jul 30, 2025
A local privilege escalation vulnerability exists in Commvault for Windows versions 11.20.0, 11...
High
Unreviewed
CVE-2024-13975
was published
Jul 25, 2025
An issue in ETSI Open-Source MANO (OSM) v.14.x, v.15.x allows a remote attacker to escalate...
High
Unreviewed
CVE-2024-48729
was published
Jul 25, 2025
An issue in ETSI Open-Source MANO (OSM) v.14.x, v.15.x allows a remote attacker to escalate...
Moderate
Unreviewed
CVE-2024-48730
was published
Jul 25, 2025
In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve...
Moderate
Unreviewed
CVE-2025-8107
was published
Jul 25, 2025
This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8...
Moderate
Unreviewed
CVE-2025-22165
was published
Jul 25, 2025
A local privilege escalation vulnerability exists in lastore-daemon, the system package manager...
High
Unreviewed
CVE-2016-15045
was published
Jul 23, 2025
Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources
High
CVE-2025-53942
was published
for
goauthentik.io
(Go)
Jul 22, 2025
The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1...
High
Unreviewed
CVE-2015-10139
was published
Jul 19, 2025
Duplicate Advisory: Keycloak Privilege Escalation Vulnerability in Admin Console (FGAPv2 Enabled)
Moderate
GHSA-83j7-mhw9-388w
was published
for
org.keycloak:keycloak-services
(Maven)
Jul 18, 2025
•
withdrawn
Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials (for privileged...
Moderate
Unreviewed
CVE-2025-32353
was published
Jul 16, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Moderate
Unreviewed
CVE-2025-53025
was published
Jul 15, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Moderate
Unreviewed
CVE-2025-53026
was published
Jul 15, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Low
Unreviewed
CVE-2025-53029
was published
Jul 15, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
High
Unreviewed
CVE-2025-53027
was published
Jul 15, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Moderate
Unreviewed
CVE-2025-53030
was published
Jul 15, 2025
ProTip!
Advisories are also available from the
GraphQL API