GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,679
Erlang
34
GitHub Actions
26
Go
2,268
Maven
5,000+
npm
3,923
NuGet
705
pip
3,686
Pub
12
RubyGems
916
Rust
944
Swift
38
Unreviewed advisories
All unreviewed
5,000+
112 advisories
Filter by severity
Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite ...
Low
Unreviewed
CVE-2025-30731
was published
Apr 15, 2025
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable...
Low
Unreviewed
CVE-2025-30700
was published
Apr 15, 2025
An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS...
Low
Unreviewed
CVE-2023-42969
was published
Apr 11, 2025
A vulnerability was found in Projeqtor up to 12.0.2. It has been rated as critical. Affected by...
Low
Unreviewed
CVE-2025-3169
was published
Apr 3, 2025
A user authorized to access a view may be able to alter the intended collation, allowing them to...
Low
Unreviewed
CVE-2025-3082
was published
Apr 1, 2025
This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS...
Low
Unreviewed
CVE-2025-24193
was published
Apr 1, 2025
Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the...
Low
Unreviewed
CVE-2025-25618
was published
Mar 17, 2025
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical....
Low
Unreviewed
CVE-2025-1882
was published
Mar 3, 2025
Magento Improper Access Control vulnerability
Low
CVE-2025-24429
was published
for
magento/community-edition
(Composer)
Feb 11, 2025
Windows NTFS Elevation of Privilege Vulnerability
Low
Unreviewed
CVE-2025-21337
was published
Feb 11, 2025
IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an...
Low
Unreviewed
CVE-2024-35122
was published
Jan 24, 2025
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Low
CVE-2024-48925
was published
for
Umbraco.CMS
(NuGet)
Oct 22, 2024
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ...
Low
Unreviewed
CVE-2024-21247
was published
Oct 15, 2024
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...
Low
Unreviewed
CVE-2023-27303
was published
Oct 10, 2024
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...
Low
Unreviewed
CVE-2023-26596
was published
Oct 10, 2024
Magento Open Source Improper Access Control vulnerability
Low
CVE-2024-45149
was published
for
magento/community-edition
(Composer)
Oct 10, 2024
Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when...
Low
Unreviewed
CVE-2024-47145
was published
Sep 26, 2024
Improper access control in Intel(R) RAID Web Console software all versions may allow an...
Low
Unreviewed
CVE-2024-36261
was published
Sep 16, 2024
Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user...
Low
Unreviewed
CVE-2024-28170
was published
Sep 16, 2024
This issue was addressed by restricting options offered on a locked device. This issue is fixed...
Low
Unreviewed
CVE-2024-40822
was published
Jul 30, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and...
Low
Unreviewed
CVE-2023-42957
was published
Jul 29, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4...
Low
Unreviewed
CVE-2024-5470
was published
Jul 11, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 16.11...
Low
Unreviewed
CVE-2024-2880
was published
Jul 11, 2024
Mattermost versions 9.8.0, 9.7.x <= 9.7.4, 9.6.x <= 9.6.2 and 9.5.x <= 9.5.5 fail to prevent...
Low
Unreviewed
CVE-2024-39361
was published
Jul 3, 2024
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0, when using shared channels with multiple remote...
Low
Unreviewed
CVE-2024-36257
was published
Jul 3, 2024
ProTip!
Advisories are also available from the
GraphQL API