Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,237 advisories

Loading
Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions... Low Unreviewed
CVE-2025-1412 was published Feb 24, 2025
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for... Low Unreviewed
CVE-2024-45674 was published Feb 22, 2025
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects... Low Unreviewed
CVE-2025-25878 was published Feb 21, 2025
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects... Low Unreviewed
CVE-2025-25877 was published Feb 21, 2025
The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.7.4 does not sanitise and... Low Unreviewed
CVE-2024-13314 was published Feb 21, 2025
The Ajax Search Lite WordPress plugin before 4.12.5 does not sanitise and escape some of its... Low Unreviewed
CVE-2024-13585 was published Feb 21, 2025
A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an... Low Unreviewed
CVE-2025-1465 was published Feb 19, 2025
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in... Low Unreviewed
CVE-2025-27113 was published Feb 19, 2025
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted... Low Unreviewed
CVE-2024-57257 was published Feb 19, 2025
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability... Low Unreviewed
CVE-2025-1376 was published Feb 17, 2025
A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux.... Low Unreviewed
CVE-2025-1369 was published Feb 17, 2025
A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This... Low Unreviewed
CVE-2025-1352 was published Feb 16, 2025
For a brief summary of Xapi terminology, see: https://xapi-project.github.io/xen-api/overview... Low Unreviewed
CVE-2024-31144 was published Feb 14, 2025
Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint... Low Unreviewed
CVE-2025-0503 was published Feb 14, 2025
There is a defect in the CPython standard library module “mimetypes” where on Windows the default... Low Unreviewed
CVE-2024-3220 was published Feb 14, 2025
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter... Low Unreviewed
CVE-2025-25899 was published Feb 13, 2025
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... Low Unreviewed
CVE-2024-47266 was published Feb 13, 2025
The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape... Low Unreviewed
CVE-2025-0692 was published Feb 13, 2025
The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its... Low Unreviewed
CVE-2024-13125 was published Feb 13, 2025
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &... Low Unreviewed
CVE-2024-13121 was published Feb 13, 2025
A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal,... Low Unreviewed
CVE-2024-34521 was published Feb 13, 2025
Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet... Low Unreviewed
CVE-2024-39271 was published Feb 13, 2025
Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800... Low Unreviewed
CVE-2024-39286 was published Feb 13, 2025
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability... Low Unreviewed
CVE-2025-1215 was published Feb 12, 2025
A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This... Low Unreviewed
CVE-2025-1207 was published Feb 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database