Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
49
Go
3,518
Maven
5,000+
npm
5,000+
NuGet
911
pip
4,758
Pub
13
RubyGems
1,036
Rust
1,228
Swift
53
Unreviewed advisories
All unreviewed
5,000+

298 advisories

Loading
A server side request forgery vulnerability was identified in GitHub Enterprise Server that... High Unreviewed
CVE-2024-3684 was published Apr 19, 2024
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument... High Unreviewed
CVE-2025-43730 was published Aug 27, 2025
Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2... High Unreviewed
CVE-2025-1712 was published May 21, 2025
An issue was discovered in Commvault before 11.36.60. A security vulnerability has been... Moderate Unreviewed
CVE-2025-57791 was published Aug 20, 2025
filebrowser Allows Shell Commands to Spawn Other Commands High
CVE-2025-52903 was published for github.com/filebrowser/filebrowser (Go) Jun 27, 2025
mtausig Credited to mtausig and hacdias hacdias hacdias
gix-transport code execution vulnerability Moderate
CVE-2023-53158 was published for gix-transport (Rust) Sep 25, 2023
EliahKagan Credited to EliahKagan
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions... High Unreviewed
CVE-2025-6232 was published Jul 17, 2025
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions... High Unreviewed
CVE-2025-6231 was published Jul 17, 2025
A vulnerability exists in Advantech iView that allows for argument injection in the... High Unreviewed
CVE-2025-53509 was published Jul 11, 2025
A vulnerability exists in Advantech iView that allows for argument injection in NetworkServlet... High Unreviewed
CVE-2025-52459 was published Jul 11, 2025
A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are... High Unreviewed
CVE-2025-49520 was published Jun 30, 2025
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to... Critical Unreviewed
CVE-2022-28391 was published Apr 4, 2022
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35005 was published Jun 8, 2025
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35009 was published Jun 8, 2025
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35010 was published Jun 8, 2025
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35008 was published Jun 8, 2025
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35006 was published Jun 8, 2025
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35007 was published Jun 8, 2025
The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to... High Unreviewed
CVE-2025-3460 was published Jun 8, 2025
The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable... High Unreviewed
CVE-2025-3459 was published Jun 8, 2025
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the... High Unreviewed
CVE-2025-32457 was published Jun 8, 2025
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post... High Unreviewed
CVE-2025-35004 was published Jun 8, 2025
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the... High Unreviewed
CVE-2025-32459 was published Jun 8, 2025
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the... High Unreviewed
CVE-2025-32458 was published Jun 8, 2025
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the... High Unreviewed
CVE-2025-32456 was published Jun 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database
⚡