GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
44
GitHub Actions
45
Go
3,248
Maven
5,000+
npm
5,000+
NuGet
867
pip
4,513
Pub
12
RubyGems
997
Rust
1,189
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
60 advisories
Filter by severity
Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk...
Critical
Unreviewed
CVE-2026-30793
was published
Mar 5, 2026
It was identified that under certain specific preconditions, an API key that was originally...
Critical
Unreviewed
CVE-2024-37282
was published
Jan 30, 2026
Azure Entra ID Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2026-24305
was published
Jan 23, 2026
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate...
Critical
Unreviewed
CVE-2025-65041
was published
Dec 19, 2025
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers...
Critical
Unreviewed
CVE-2023-53895
was published
Dec 16, 2025
In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not...
Critical
Unreviewed
CVE-2025-58386
was published
Dec 2, 2025
In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System...
Critical
Unreviewed
CVE-2025-63691
was published
Nov 7, 2025
An authorization issue was addressed with improved state management. This issue is fixed in tvOS...
Critical
Unreviewed
CVE-2025-31255
was published
Sep 16, 2025
Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate...
Critical
Unreviewed
CVE-2025-53795
was published
Aug 21, 2025
The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to...
Critical
Unreviewed
CVE-2025-7778
was published
Aug 15, 2025
Azure Portal Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2025-53792
was published
Aug 7, 2025
Improper authorization in Azure Machine Learning allows an authorized attacker to elevate...
Critical
Unreviewed
CVE-2025-49746
was published
Jul 18, 2025
The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing...
Critical
Unreviewed
CVE-2025-4631
was published
May 31, 2025
Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges...
Critical
Unreviewed
CVE-2025-29827
was published
May 9, 2025
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a...
Critical
Unreviewed
CVE-2025-4104
was published
May 7, 2025
The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper...
Critical
Unreviewed
CVE-2025-3918
was published
May 3, 2025
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate...
Critical
Unreviewed
CVE-2025-30392
was published
Apr 30, 2025
Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.
Critical
Unreviewed
CVE-2025-30390
was published
Apr 30, 2025
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function...
Critical
Unreviewed
CVE-2025-29659
was published
Apr 21, 2025
In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control,...
Critical
Unreviewed
CVE-2024-9095
was published
Mar 20, 2025
A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid...
Critical
Unreviewed
CVE-2025-20125
was published
Feb 5, 2025
Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common...
Critical
Unreviewed
CVE-2024-13241
was published
Jan 9, 2025
Azure CycleCloud Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2024-43602
was published
Nov 12, 2024
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...
Critical
Unreviewed
CVE-2024-36130
was published
Aug 7, 2024
An improper authorization vulnerability exists in the mintplex-labs/anything-llm application,...
Critical
Unreviewed
CVE-2024-3033
was published
Jun 6, 2024
ProTip!
Advisories are also available from the
GraphQL API