GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
47
GitHub Actions
48
Go
3,378
Maven
5,000+
npm
5,000+
NuGet
881
pip
4,573
Pub
13
RubyGems
1,013
Rust
1,205
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
575 advisories
Filter by severity
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22176
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22169
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the...
Moderate
Unreviewed
CVE-2025-22171
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient...
Moderate
Unreviewed
CVE-2025-22170
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22174
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22168
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22172
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22177
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22173
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22175
was published
Oct 22, 2025
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...
Moderate
Unreviewed
CVE-2025-53056
was published
Oct 21, 2025
The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due...
Moderate
Unreviewed
CVE-2025-11256
was published
Oct 18, 2025
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2025-11510
was published
Oct 18, 2025
An improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1...
Moderate
Unreviewed
CVE-2025-54822
was published
Oct 14, 2025
Redis Enterprise Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2025-59271
was published
Oct 9, 2025
A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected...
Moderate
Unreviewed
CVE-2025-11321
was published
Oct 6, 2025
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2025-11227
was published
Oct 4, 2025
Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id.
Moderate
Unreviewed
CVE-2025-59686
was published
Oct 1, 2025
A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is...
Moderate
Unreviewed
CVE-2025-10947
was published
Sep 25, 2025
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317...
High
Unreviewed
CVE-2025-59305
was published
Sep 24, 2025
A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of...
Moderate
Unreviewed
CVE-2025-10759
was published
Sep 22, 2025
Authorization Bypass Through User-Controlled Key, CWE - 862 - Missing Authorization, – Improper...
Moderate
Unreviewed
CVE-2025-8532
was published
Sep 19, 2025
Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource...
Moderate
Unreviewed
CVE-2025-8057
was published
Sep 16, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An...
Moderate
Unreviewed
CVE-2025-43231
was published
Sep 16, 2025
An authorization issue was addressed with improved state management. This issue is fixed in tvOS...
Critical
Unreviewed
CVE-2025-31255
was published
Sep 16, 2025
ProTip!
Advisories are also available from the
GraphQL API