Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,684
Erlang
34
GitHub Actions
26
Go
2,274
Maven
5,000+
npm
3,928
NuGet
706
pip
3,694
Pub
12
RubyGems
916
Rust
950
Swift
38
Unreviewed advisories
All unreviewed
5,000+

10 advisories

Loading
Harden-Runner allows evasion of 'disable-sudo' policy Moderate
CVE-2025-32955 was published for step-security/harden-runner (GitHub Actions) Apr 22, 2025
loresuso darryk10
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent... Moderate Unreviewed
CVE-2024-28829 was published Aug 20, 2024
Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability.... High Unreviewed
CVE-2024-27165 was published Jun 14, 2024
Veritas System Recovery before 23.2_Hotfix has incorrect permissions for the Veritas System... High Unreviewed
CVE-2024-35204 was published May 14, 2024
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation... High Unreviewed
CVE-2023-28047 was published Apr 20, 2023
Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and... High Unreviewed
CVE-2024-0638 was published Mar 22, 2024
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent... High Unreviewed
CVE-2024-28824 was published Mar 22, 2024
A user with a `default` role given to them by the admin can sent `DELETE` HTTP requests to ... High Unreviewed
CVE-2024-0798 was published Feb 26, 2024
Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege... High Unreviewed
CVE-2023-32451 was published Feb 6, 2024
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion... High Unreviewed
CVE-2023-28046 was published Apr 6, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database