Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,859 advisories

Loading
A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of... Moderate Unreviewed
CVE-2025-9602 was published Aug 29, 2025
Incorrect authorization in Kibana can lead to privilege escalation via the built-in... Moderate Unreviewed
CVE-2025-25010 was published Aug 28, 2025
The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for... Moderate Unreviewed
CVE-2025-9376 was published Aug 28, 2025
Kubernetes Nodes can delete themselves by adding an OwnerReference Moderate
CVE-2025-5187 was published for k8s.io/kubernetes (Go) Aug 27, 2025
An access control vulnerability was discovered in the Request Trace and Download Trace... Moderate Unreviewed
CVE-2025-1501 was published Aug 26, 2025
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004... Critical Unreviewed
CVE-2025-36157 was published Aug 24, 2025
Mattermost Lack of Access Control Validation Low
CVE-2025-49810 was published for github.com/mattermost/mattermost-server (Go) Aug 21, 2025
Mattermost Fails to Properly Validate Team Role Modification Low
CVE-2025-53971 was published for github.com/mattermost/mattermost-server (Go) Aug 21, 2025
An Improper Access Control could allow a malicious actor authenticated in the API of certain... Moderate Unreviewed
CVE-2025-27213 was published Aug 21, 2025
In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to... Moderate Unreviewed
CVE-2025-57728 was published Aug 20, 2025
MiR software versions prior to version 3.0.0 have insufficient authorization controls when... Moderate Unreviewed
CVE-2025-9228 was published Aug 20, 2025
OpenFGA Authorization Bypass Moderate
CVE-2025-55213 was published for github.com/openfga/openfga (Go) Aug 18, 2025
domharries
Credited to domharries
Capsule tenant owners with "patch namespace" permission can hijack system namespaces label Critical
CVE-2025-55205 was published for github.com/projectcapsule/capsule (Go) Aug 18, 2025
b0b0haha
Credited to b0b0haha
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their... High Unreviewed
CVE-2025-36120 was published Aug 18, 2025
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web... High Unreviewed
CVE-2025-7773 was published Aug 14, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1... Moderate Unreviewed
CVE-2024-10219 was published Aug 13, 2025
Magento has incorrect authorization issue that leads to arbitrary file system read High
CVE-2025-49556 was published for magento/community-edition (Composer) Aug 12, 2025
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=... High Unreviewed
CVE-2024-41979 was published Aug 12, 2025
Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain... High Unreviewed
CVE-2025-42951 was published Aug 12, 2025
@fedify/fedify has Improper Authentication and Incorrect Authorization High
CVE-2025-54888 was published for @fedify/fedify (npm) Aug 8, 2025
allouis dahlia
Credited to allouis and dahlia
A vulnerability was identified in the XPC services of Fantastical. The services failed to... Moderate Unreviewed
CVE-2025-8533 was published Aug 7, 2025
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated,... Moderate Unreviewed
CVE-2025-20332 was published Aug 6, 2025
Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration... Critical Unreviewed
CVE-2025-54253 was published Aug 5, 2025
tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that... Moderate Unreviewed
CVE-2025-54554 was published Aug 5, 2025
In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without... High Unreviewed
CVE-2025-20701 was published Aug 4, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database