GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,820
Erlang
36
GitHub Actions
32
Go
2,412
Maven
5,000+
npm
4,050
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,004
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
15 advisories
Filter by severity
Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and...
High
Unreviewed
CVE-2025-31965
was published
Jul 29, 2025
In langgenius/dify v0.10.1, the `/forgot-password/resets` endpoint does not verify the password...
High
Unreviewed
CVE-2024-12776
was published
Mar 20, 2025
A flaw was found in the skupper console, a read-only interface that renders cluster network,...
High
Unreviewed
CVE-2024-12582
was published
Dec 24, 2024
The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege...
High
Unreviewed
CVE-2024-6637
was published
Jul 20, 2024
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with...
High
Unreviewed
CVE-2023-4727
was published
Jun 11, 2024
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an...
High
Unreviewed
CVE-2024-20378
was published
May 1, 2024
In telephony, there is a possible escalation of privilege due to a permissions bypass. This could...
High
Unreviewed
CVE-2024-20015
was published
Feb 5, 2024
Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS...
High
Unreviewed
CVE-2023-6998
was published
Dec 30, 2023
Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior...
High
Unreviewed
CVE-2023-4898
was published
Sep 12, 2023
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1,...
High
Unreviewed
CVE-2023-36497
was published
Sep 11, 2023
Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS...
High
Unreviewed
CVE-2023-2959
was published
Jul 17, 2023
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due...
High
Unreviewed
CVE-2023-28727
was published
Mar 31, 2023
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...
High
Unreviewed
CVE-2023-27535
was published
Mar 30, 2023
A vulnerability has been identified in SIMATIC HMI United Comfort Panels (All versions). Affected...
High
Unreviewed
CVE-2020-15787
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API