GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
44
GitHub Actions
45
Go
3,196
Maven
5,000+
npm
5,000+
NuGet
864
pip
4,483
Pub
12
RubyGems
992
Rust
1,186
Swift
51
Unreviewed advisories
All unreviewed
5,000+
585 advisories
Filter by severity
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated...
Moderate
Unreviewed
CVE-2025-49456
was published
Aug 13, 2025
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in...
High
Unreviewed
CVE-2024-6769
was published
Sep 26, 2024
A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded...
High
Unreviewed
CVE-2024-11454
was published
Dec 9, 2024
A maliciously crafted binary file, when present while loading files in certain Autodesk...
High
Unreviewed
CVE-2025-5039
was published
Jul 24, 2025
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT...
High
Unreviewed
CVE-2025-5335
was published
Jun 10, 2025
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT...
High
Unreviewed
CVE-2024-7995
was published
Nov 5, 2024
A vulnerability was identified in Mechrevo Control Center GX V2 5.56.51.48. This affects an...
High
Unreviewed
CVE-2025-9016
was published
Aug 15, 2025
A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this...
High
Unreviewed
CVE-2025-9000
was published
Aug 15, 2025
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to...
Critical
Unreviewed
CVE-2025-49457
was published
Aug 13, 2025
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on...
High
Unreviewed
CVE-2025-0141
was published
Jul 10, 2025
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1. It has been rated as critical. This...
High
Unreviewed
CVE-2025-4540
was published
May 11, 2025
A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This...
High
Unreviewed
CVE-2025-4539
was published
May 11, 2025
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
High
CVE-2025-30399
was published
for
Microsoft.NetCore.App.Runtime.linux-arm
(NuGet)
Jun 11, 2025
A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16....
High
Unreviewed
CVE-2025-5180
was published
May 26, 2025
An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local...
High
Unreviewed
CVE-2025-2501
was published
May 30, 2025
A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical....
High
Unreviewed
CVE-2025-5129
was published
May 24, 2025
Broadcom Automic
Automation Agent Unix versions <
24.3.0 HF4 and < 21.0.13 HF1 allow low...
High
Unreviewed
CVE-2025-4971
was published
May 20, 2025
A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This...
High
Unreviewed
CVE-2025-4769
was published
May 16, 2025
Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search...
High
Unreviewed
CVE-2021-3305
was published
Oct 18, 2022
A vulnerability classified as critical has been found in Shanghai Bairui Information Technology...
High
Unreviewed
CVE-2025-4532
was published
May 11, 2025
A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows....
High
Unreviewed
CVE-2025-4525
was published
May 11, 2025
A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as...
High
Unreviewed
CVE-2025-4455
was published
May 9, 2025
Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3...
High
Unreviewed
CVE-2022-41796
was published
Oct 24, 2022
OpenStack Kolla sudo privilege escalation vulnerability
High
CVE-2022-38060
was published
for
kolla
(pip)
Dec 21, 2022
Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking)...
High
Unreviewed
CVE-2019-8062
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API