Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,299
Erlang
31
GitHub Actions
21
Go
2,065
Maven
5,000+
npm
3,744
NuGet
668
pip
3,426
Pub
12
RubyGems
892
Rust
877
Swift
36
Unreviewed advisories
All unreviewed
5,000+

11,287 advisories

Loading
Apache Airflow Fab Provider Insufficient Session Expiration vulnerability Low
CVE-2024-45033 was published for apache-airflow-providers-fab (pip) Jan 8, 2025
Under certain circumstances, a user opt-in setting that Focus should require authentication... Low Unreviewed
CVE-2025-0245 was published Jan 7, 2025
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote... Low Unreviewed
CVE-2021-20455 was published Jan 7, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... Low Unreviewed
CVE-2024-12425 was published Jan 7, 2025
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not... Low Unreviewed
CVE-2024-10102 was published Jan 7, 2025
The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its... Low Unreviewed
CVE-2024-10562 was published Jan 7, 2025
The Spacer plugin for WordPress is vulnerable to unauthorized access of data due to a missing... Low Unreviewed
CVE-2024-10527 was published Jan 7, 2025
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0... Low Unreviewed
CVE-2024-48455 was published Jan 7, 2025
Grav Cross-site Scripting vulnerability Low
CVE-2024-35498 was published for getgrav/grav (Composer) Jan 6, 2025
REDAXO CMS Cross-site Scripting vulnerability Low
CVE-2024-46209 was published for redaxo/source (Composer) Jan 6, 2025
IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0... Low Unreviewed
CVE-2024-51472 was published Jan 6, 2025
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... Low Unreviewed
CVE-2024-12970 was published Jan 6, 2025
A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as... Low Unreviewed
CVE-2025-0214 was published Jan 4, 2025
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.... Low Unreviewed
CVE-2024-55541 was published Jan 2, 2025
iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive... Low Unreviewed
CVE-2024-11946 was published Dec 30, 2024
magic-crypt uses insecure cryptographic algorithms Low
GHSA-gmx7-gr5q-85w5 was published for magic-crypt (Rust) Dec 30, 2024
xous has unsound usages of `core::slice::from_raw_parts` Low
GHSA-gv7f-5qqh-vxfx was published for xous (Rust) Dec 30, 2024
Apache NiFi: Missing Complete Authorization for Parameter and Service References Low
CVE-2024-56512 was published for org.apache.nifi:nifi-web-api (Maven) Dec 28, 2024
exceptionfactory
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common... Low Unreviewed
CVE-2020-1822 was published Dec 28, 2024
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common... Low Unreviewed
CVE-2020-1824 was published Dec 28, 2024
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common... Low Unreviewed
CVE-2020-1821 was published Dec 28, 2024
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common... Low Unreviewed
CVE-2020-1823 was published Dec 28, 2024
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common... Low Unreviewed
CVE-2020-1820 was published Dec 28, 2024
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common... Low Unreviewed
CVE-2020-1819 was published Dec 27, 2024
There is an information disclosure vulnerability in several smartphones. The system has a logic... Low Unreviewed
CVE-2020-9082 was published Dec 27, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database