Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

11,257 advisories

Loading
Some Honor products are affected by incorrect privilege assignment vulnerability, successful... Low Unreviewed
CVE-2024-47149 was published Dec 26, 2024
Some Honor products are affected by information leak vulnerability, successful exploitation could... Low Unreviewed
CVE-2024-47150 was published Dec 26, 2024
Some Honor products are affected by incorrect privilege assignment vulnerability, successful... Low Unreviewed
CVE-2024-47157 was published Dec 26, 2024
Some Honor products are affected by information leak vulnerability, successful exploitation could... Low Unreviewed
CVE-2024-47156 was published Dec 26, 2024
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g.,... Low Unreviewed
CVE-2024-56433 was published Dec 26, 2024
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were... Low Unreviewed
CVE-2023-5117 was published Dec 25, 2024
Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber... Low Unreviewed
CVE-2024-55539 was published Dec 23, 2024
Oqtane Framework Insecure Direct Object Reference vulnerability Low
CVE-2024-55186 was published for Oqtane.Client (NuGet) Dec 20, 2024
Path Traversal and Insecure Direct Object Reference (IDOR) vulnerabilities in the eSignaViewer... Low Unreviewed
CVE-2024-12014 was published Dec 20, 2024
There is an insufficient authentication vulnerability in some Huawei smart phone. An... Low Unreviewed
CVE-2020-9250 was published Dec 20, 2024
QOS.CH logback-core Server-Side Request Forgery vulnerability Low
CVE-2024-12801 was published for ch.qos.logback:logback-core (Maven) Dec 19, 2024
HTHou
A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin ... Low Unreviewed
CVE-2024-9101 was published Dec 19, 2024
Prototype pollution in jsii.configureCategories Low
GHSA-m56h-5xx3-2jc2 was published for jsii (npm) Dec 18, 2024
Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm Low
CVE-2024-56128 was published for org.apache.kafka:kafka (Maven) Dec 18, 2024
An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An... Low Unreviewed
CVE-2024-42194 was published Dec 17, 2024
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote... Low Unreviewed
CVE-2024-49820 was published Dec 17, 2024
The Easy Digital Downloads plugin for WordPress is vulnerable to Improper Authorization in... Low Unreviewed
CVE-2024-9654 was published Dec 17, 2024
Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for Android... Low Unreviewed
CVE-2024-54125 was published Dec 17, 2024
SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type Low
GHSA-27vq-hv74-7cqp was published for surrealdb (Rust) Dec 16, 2024
AlbertMarashi
ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx... Low Unreviewed
CVE-2024-56082 was published Dec 15, 2024
Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly... Low Unreviewed
CVE-2023-41695 was published Dec 13, 2024
Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly... Low Unreviewed
CVE-2022-45819 was published Dec 13, 2024
This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism... Low Unreviewed
CVE-2021-32007 was published Dec 13, 2024
The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file... Low Unreviewed
CVE-2024-12300 was published Dec 13, 2024
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6... Low Unreviewed
CVE-2024-10043 was published Dec 12, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database