Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

31 advisories

Loading
Outdated Static Dependency in vue-moment Moderate
GHSA-hrpp-f84w-xhfg was published for vue-moment (npm) Sep 4, 2020
traitobject is Unmaintained Critical
GHSA-pp8r-vv2j-9j5v was published for traitobject (Rust) Sep 16, 2022
typemap is Unmaintained Critical
GHSA-vfv3-9w6v-23jp was published for typemap (Rust) Sep 16, 2022
Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to... Moderate Unreviewed
CVE-2021-22142 was published Nov 22, 2023
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG... Critical Unreviewed
CVE-2023-7102 was published Dec 25, 2023
Vapor contains an integer overflow in URI leading to potential host spoofing Moderate
CVE-2024-21631 was published for github.com/vapor/vapor (Swift) Jan 3, 2024
0xTim Credited to 0xTim, gwynne, and baarde gwynne gwynne
baarde baarde
Azure Storage Movement Client Library Denial of Service Vulnerability High
CVE-2024-35252 was published for Microsoft.Azure.Storage.DataMovement (NuGet) Jun 11, 2024
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device... High Unreviewed
CVE-2024-8885 was published Oct 2, 2024
CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause... High Unreviewed
CVE-2024-11999 was published Dec 17, 2024
HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs... Critical Unreviewed
CVE-2022-36937 was published May 10, 2023
This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node... High Unreviewed
CVE-2025-23088 was published Jan 22, 2025
This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node... High Unreviewed
CVE-2025-23087 was published Jan 22, 2025
This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node... High Unreviewed
CVE-2025-23089 was published Jan 22, 2025
An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited... High Unreviewed
CVE-2022-46871 was published Dec 22, 2022
The Linux distribution underlying the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) is... High Unreviewed
CVE-2025-3497 was published Jul 9, 2025
BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several... Critical Unreviewed
CVE-2025-40906 was published May 16, 2025
Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in... Critical Unreviewed
CVE-2025-10220 was published Sep 10, 2025
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and... Critical Unreviewed
CVE-2025-34192 was published Sep 19, 2025
HCL MyXalytics  6.6.  product is affected by Use of Vulnerable/Outdated Versions Vulnerability Low Unreviewed
CVE-2025-52658 was published Oct 3, 2025
The device is running an outdated operating system, which may be susceptible to known... Critical Unreviewed
CVE-2025-10561 was published Oct 27, 2025
Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects... Critical Unreviewed
CVE-2025-12104 was published Oct 23, 2025
Use of unmaintained third party components for some Intel(R) Processor Identification Utility... High Unreviewed
CVE-2025-20010 was published Nov 11, 2025
HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability using which... Low Unreviewed
CVE-2025-55277 was published Mar 26, 2026
Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known... Critical Unreviewed
CVE-2026-41468 was published Apr 22, 2026
The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x... High Unreviewed
CVE-2026-21821 was published May 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database