Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
92
GitHub Actions
54
Go
4,217
Maven
5,000+
npm
5,000+
NuGet
1,021
pip
5,000+
Pub
13
RubyGems
1,103
Rust
1,443
Swift
61
Unreviewed advisories
All unreviewed
5,000+

22 advisories

Loading
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure) High
GHSA-v52w-28xh-v562 was published for @kozou/api (npm) Jun 19, 2026
Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator Moderate
CVE-2026-55226 was published for io.strimzi:strimzi (Maven) Jun 18, 2026
katheris Credited to katheris, ppatierno, and scholzj ppatierno ppatierno
scholzj scholzj
A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged,... High Unreviewed
CVE-2026-39459 was published May 13, 2026
Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege... Moderate Unreviewed
CVE-2026-32655 was published Apr 27, 2026
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... High Unreviewed
CVE-2026-35535 was published Apr 3, 2026
A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the... High Unreviewed
CVE-2025-9711 was published Feb 3, 2026
The binary serving the web server and executing basically all actions launched from the Web UI is... High Unreviewed
CVE-2025-59106 was published Jan 26, 2026
Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode Low
CVE-2026-23634 was published for pepr (npm) Jan 15, 2026
tghastings Credited to tghastings
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub... Moderate Unreviewed
CVE-2025-68267 was published Dec 16, 2025
The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up... High Unreviewed
CVE-2025-7722 was published Jul 23, 2025
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between... High Unreviewed
CVE-2025-1384 was published Jul 14, 2025
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation ... High Unreviewed
CVE-2025-47809 was published May 16, 2025
Harden-Runner allows evasion of 'disable-sudo' policy Moderate
CVE-2025-32955 was published for step-security/harden-runner (GitHub Actions) Apr 22, 2025
loresuso Credited to loresuso and darryk10 darryk10 darryk10
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent... Moderate Unreviewed
CVE-2024-28829 was published Aug 20, 2024
Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability.... High Unreviewed
CVE-2024-27165 was published Jun 14, 2024
Veritas System Recovery before 23.2_Hotfix has incorrect permissions for the Veritas System... High Unreviewed
CVE-2024-35204 was published May 14, 2024
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent... High Unreviewed
CVE-2024-28824 was published Mar 22, 2024
Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and... High Unreviewed
CVE-2024-0638 was published Mar 22, 2024
A user with a `default` role given to them by the admin can sent `DELETE` HTTP requests to ... High Unreviewed
CVE-2024-0798 was published Feb 26, 2024
Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege... High Unreviewed
CVE-2023-32451 was published Feb 6, 2024
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation... High Unreviewed
CVE-2023-28047 was published Apr 20, 2023
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion... High Unreviewed
CVE-2023-28046 was published Apr 6, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database