Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
44
GitHub Actions
43
Go
3,181
Maven
5,000+
npm
5,000+
NuGet
863
pip
4,474
Pub
12
RubyGems
991
Rust
1,185
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

19 advisories

Loading
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically... High Unreviewed
CVE-2026-3021 was published Mar 16, 2026
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically... High Unreviewed
CVE-2026-3022 was published Mar 16, 2026
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically... Moderate Unreviewed
CVE-2026-3023 was published Mar 16, 2026
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12... Moderate Unreviewed
CVE-2025-36366 was published Jan 31, 2026
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12... Moderate Unreviewed
CVE-2025-36353 was published Jan 31, 2026
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12... Moderate Unreviewed
CVE-2025-36442 was published Jan 31, 2026
Due to insufficient input handling, the SAP Identity Management REST interface allows an... Low Unreviewed
CVE-2026-0504 was published Jan 13, 2026
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment... Moderate Unreviewed
CVE-2025-42884 was published Nov 11, 2025
IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could... Moderate Unreviewed
CVE-2025-36185 was published Nov 7, 2025
NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection... Moderate Unreviewed
CVE-2025-23292 was published Sep 30, 2025
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a... Moderate Unreviewed
CVE-2025-33114 was published Jul 29, 2025
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could... Moderate Unreviewed
CVE-2021-1481 was published Nov 15, 2024
The product does not validate any query towards persistent data, resulting in a risk of injection... Critical Unreviewed
CVE-2024-4872 was published Aug 27, 2024
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) federated server 10.5, 11.1,... Moderate Unreviewed
CVE-2024-35136 was published Aug 14, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to... Moderate Unreviewed
CVE-2024-31882 was published Aug 14, 2024
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could... Moderate Unreviewed
CVE-2021-34712 was published May 24, 2022
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could... Moderate Unreviewed
CVE-2021-1349 was published May 24, 2022
An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen.... High Unreviewed
CVE-2018-7829 was published May 24, 2022
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of... High Unreviewed
CVE-2017-12904 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database