GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,819
Erlang
36
GitHub Actions
32
Go
2,410
Maven
5,000+
npm
4,046
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
80 advisories
Filter by severity
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Low
Unreviewed
CVE-2025-53029
was published
Jul 15, 2025
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). ...
Low
Unreviewed
CVE-2025-50065
was published
Jul 15, 2025
Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. ...
Low
Unreviewed
CVE-2025-50066
was published
Jul 15, 2025
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that...
Low
Unreviewed
CVE-2025-6943
was published
Jul 2, 2025
The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0....
Low
Unreviewed
CVE-2025-22829
was published
Jun 11, 2025
An authenticated administrator could modify the Created By username for a user account
Low
Unreviewed
CVE-2025-46744
was published
May 12, 2025
A broken access control vulnerability previously discovered in the Trend Vision One Role Name...
Low
Unreviewed
CVE-2025-31285
was published
Apr 2, 2025
An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a...
Low
Unreviewed
CVE-2025-31286
was published
Apr 2, 2025
A broken access control vulnerability previously discovered in the Trend Vision One User Account...
Low
Unreviewed
CVE-2025-31282
was published
Apr 2, 2025
A broken access control vulnerability previously discovered in the Trend Vision One User Roles...
Low
Unreviewed
CVE-2025-31283
was published
Apr 2, 2025
A broken access control vulnerability previously discovered in the Trend Vision One Status...
Low
Unreviewed
CVE-2025-31284
was published
Apr 2, 2025
An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate...
Low
Unreviewed
CVE-2024-51324
was published
Feb 12, 2025
An improper privilege management vulnerability in OTRS Generic Interface module allows change of...
Low
Unreviewed
CVE-2024-43446
was published
Jan 27, 2025
Apache Hadoop: Temporary File Local Information Disclosure
Low
CVE-2024-23454
was published
for
org.apache.hadoop:hadoop-common
(Maven)
Sep 25, 2024
Access permission verification vulnerability in the Notepad module
Impact: Successful...
Low
Unreviewed
CVE-2024-42036
was published
Aug 8, 2024
biscuit-auth vulnerable to public key confusion in third party block
Low
CVE-2024-41949
was published
for
biscuit-auth
(Rust)
Jul 31, 2024
An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk®...
Low
Unreviewed
CVE-2024-6326
was published
Jul 16, 2024
A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for...
Low
Unreviewed
CVE-2024-29210
was published
May 7, 2024
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). ...
Low
Unreviewed
CVE-2024-21101
was published
Apr 17, 2024
Improper Privilege Management in djangorestframework-simplejwt
Low
CVE-2024-22513
was published
for
djangorestframework-simplejwt
(pip)
Mar 16, 2024
Some Honor products are affected by incorrect privilege assignment vulnerability, successful...
Low
Unreviewed
CVE-2023-51433
was published
Dec 29, 2023
Some Honor products are affected by incorrect privilege assignment vulnerability, successful...
Low
Unreviewed
CVE-2023-23428
was published
Dec 29, 2023
Some Honor products are affected by incorrect privilege assignment vulnerability, successful...
Low
Unreviewed
CVE-2023-23430
was published
Dec 29, 2023
An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an...
Low
Unreviewed
CVE-2023-6793
was published
Dec 13, 2023
The FACSChorus software does not properly assign data access privileges for operating system user...
Low
Unreviewed
CVE-2023-29066
was published
Nov 28, 2023
ProTip!
Advisories are also available from the
GraphQL API