Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,822
Erlang
36
GitHub Actions
32
Go
2,413
Maven
5,000+
npm
4,052
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

124,598 advisories

Loading
Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2... Moderate Unreviewed
CVE-2025-21017 was published Aug 6, 2025
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to... Moderate Unreviewed
CVE-2025-21019 was published Aug 6, 2025
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to... Moderate Unreviewed
CVE-2025-21015 was published Aug 6, 2025
Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged... Moderate Unreviewed
CVE-2025-21018 was published Aug 6, 2025
Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows... Moderate Unreviewed
CVE-2025-21012 was published Aug 6, 2025
Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android... Moderate Unreviewed
CVE-2025-21016 was published Aug 6, 2025
Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2... Moderate Unreviewed
CVE-2025-21020 was published Aug 6, 2025
Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1... Moderate Unreviewed
CVE-2025-21013 was published Aug 6, 2025
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1... Moderate Unreviewed
CVE-2025-21014 was published Aug 6, 2025
Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows... Moderate Unreviewed
CVE-2025-21021 was published Aug 6, 2025
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor... Moderate Unreviewed
CVE-2025-7399 was published Aug 6, 2025
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact:... Moderate Unreviewed
CVE-2025-54648 was published Aug 6, 2025
Improper array index verification vulnerability in the audio codec module. Impact: Successful... Moderate Unreviewed
CVE-2025-54650 was published Aug 6, 2025
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact:... Moderate Unreviewed
CVE-2025-54647 was published Aug 6, 2025
Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1... Moderate Unreviewed
CVE-2025-21011 was published Aug 6, 2025
Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2025-54651 was published Aug 6, 2025
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local... Moderate Unreviewed
CVE-2025-21010 was published Aug 6, 2025
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-7498 was published Aug 6, 2025
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful... Moderate Unreviewed
CVE-2025-54646 was published Aug 6, 2025
Vulnerability of using incompatible types to access resources in the location service. Impact:... Moderate Unreviewed
CVE-2025-54649 was published Aug 6, 2025
The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2025-8100 was published Aug 6, 2025
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows... Moderate Unreviewed
CVE-2025-20990 was published Aug 6, 2025
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-54639 was published Aug 6, 2025
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module.... Moderate Unreviewed
CVE-2025-54642 was published Aug 6, 2025
Out-of-bounds array access issue due to insufficient data verification in the location service... Moderate Unreviewed
CVE-2025-54645 was published Aug 6, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database