GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,810
Erlang
36
GitHub Actions
31
Go
2,396
Maven
5,000+
npm
4,030
NuGet
721
pip
3,820
Pub
12
RubyGems
932
Rust
988
Swift
38
Unreviewed advisories
All unreviewed
5,000+
69 advisories
Filter by severity
Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs
Moderate
CVE-2025-53651
was published
for
org.jenkins-ci.plugins:htmlpublisher
(Maven)
Jul 9, 2025
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading...
Moderate
Unreviewed
CVE-2025-53392
was published
Jun 29, 2025
The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all...
High
Unreviewed
CVE-2025-6381
was published
Jun 28, 2025
The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to...
High
Unreviewed
CVE-2025-5927
was published
Jun 26, 2025
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack...
High
Unreviewed
CVE-2025-4799
was published
Jun 11, 2025
Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal...
High
Unreviewed
CVE-2025-36574
was published
Jun 10, 2025
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data
if...
High
Unreviewed
CVE-2024-13945
was published
May 23, 2025
Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP...
High
Unreviewed
CVE-2025-2410
was published
May 22, 2025
Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended...
High
Unreviewed
CVE-2024-48850
was published
May 22, 2025
AgentScope arbitrary file download vulnerability in rpc_agent_client
High
CVE-2024-8501
was published
for
agentscope
(pip)
Mar 20, 2025
H2O Vulnerable to Arbitrary File Overwrite via File Export
High
CVE-2024-6854
was published
for
ai.h2o:h2o-core
(Maven)
Mar 20, 2025
A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui,...
Moderate
Unreviewed
CVE-2024-12375
was published
Mar 20, 2025
DB-GPT Absolute Path Traversal vulnerability
Critical
CVE-2024-10831
was published
for
dbgpt
(pip)
Mar 20, 2025
parisneo/lollms-webui versions v9.9 to the latest are vulnerable to a directory listing...
Moderate
Unreviewed
CVE-2024-10047
was published
Mar 20, 2025
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files...
High
Unreviewed
CVE-2024-48248
was published
Mar 4, 2025
Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by...
Moderate
Unreviewed
CVE-2025-0001
was published
Feb 17, 2025
In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure...
Moderate
Unreviewed
CVE-2024-6097
was published
Feb 12, 2025
libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.
Moderate
Unreviewed
CVE-2024-57966
was published
Feb 3, 2025
Deep Java Library path traversal issue
Critical
CVE-2025-0851
was published
for
ai.djl:api
(Maven)
Jan 29, 2025
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...
Critical
Unreviewed
CVE-2024-13160
was published
Jan 14, 2025
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...
Critical
Unreviewed
CVE-2024-13161
was published
Jan 14, 2025
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...
Critical
Unreviewed
CVE-2024-13159
was published
Jan 14, 2025
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...
Critical
Unreviewed
CVE-2024-10811
was published
Jan 14, 2025
The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application...
High
Unreviewed
CVE-2024-12646
was published
Dec 16, 2024
The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application...
High
Unreviewed
CVE-2024-12643
was published
Dec 16, 2024
ProTip!
Advisories are also available from the
GraphQL API