Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,298
Maven
5,000+
npm
3,942
NuGet
708
pip
3,711
Pub
12
RubyGems
920
Rust
959
Swift
38
Unreviewed advisories
All unreviewed
5,000+

112 advisories

Loading
A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive... High Unreviewed
CVE-2024-7819 was published Mar 20, 2025
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability High
CVE-2024-8487 was published for agentscope (pip) Mar 20, 2025
Feast Cross-Origin Resource Sharing vulnerability High
CVE-2024-11602 was published for feast (pip) Mar 20, 2025
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration High
CVE-2024-8183 was published for prefect (pip) Mar 20, 2025
srsapient
An code execution vulnerability exists in the Xiaomi smarthome application product. The... High Unreviewed
CVE-2024-45352 was published Mar 27, 2025
Ollama DNS rebinding vulnerability High
CVE-2024-28224 was published for github.com/ollama/ollama (Go) Apr 8, 2024
Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service. High Unreviewed
CVE-2021-33959 was published Jan 18, 2023
A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking... High Unreviewed
CVE-2022-42927 was published Dec 22, 2022
"This issue is limited to motherboards and does not affect laptops, desktop computers, or other... High Unreviewed
CVE-2025-3462 was published May 9, 2025
Phoenix before 1.6.14 mishandles check_origin wildcarding High
CVE-2022-42975 was published for phoenix (Erlang) Oct 17, 2022
maennchen
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS)... High Unreviewed
CVE-2025-46737 was published May 12, 2025
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey... High Unreviewed
CVE-2022-22637 was published Sep 25, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database