Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
41
Go
3,016
Maven
5,000+
npm
4,737
NuGet
814
pip
4,347
Pub
12
RubyGems
987
Rust
1,140
Swift
50
Unreviewed advisories
All unreviewed
5,000+

15 advisories

Loading
IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man... Moderate Unreviewed
CVE-2025-33101 was published Feb 17, 2026
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information... Moderate Unreviewed
CVE-2025-1722 was published Jan 20, 2026
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information... Moderate Unreviewed
CVE-2025-1719 was published Jan 20, 2026
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information... Moderate Unreviewed
CVE-2025-1721 was published Dec 26, 2025
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating... Moderate Unreviewed
CVE-2025-45663 was published Nov 3, 2025
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive... Moderate Unreviewed
CVE-2025-36083 was published Oct 28, 2025
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2025-1759 was published Aug 18, 2025
An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream... Moderate Unreviewed
CVE-2025-50422 was published Aug 4, 2025
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0... Moderate Unreviewed
CVE-2025-33013 was published Jul 25, 2025
A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by... Moderate Unreviewed
CVE-2025-5105 was published May 23, 2025
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD)... Moderate Unreviewed
CVE-2023-20070 was published Nov 1, 2023
A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD)... Moderate Unreviewed
CVE-2023-20177 was published Nov 1, 2023
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with... Moderate Unreviewed
CVE-2023-20031 was published Nov 1, 2023
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort... Moderate Unreviewed
CVE-2022-20943 was published Nov 16, 2022
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort... Moderate Unreviewed
CVE-2022-20922 was published Nov 16, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database