Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

8,835 advisories

Loading
A security flaw has been discovered in kaifangqian kaifangqian-base up to... Moderate Unreviewed
CVE-2025-11406 was published Oct 7, 2025
When an error occurs in the application a full stacktrace is provided to the user. The... Moderate Unreviewed
CVE-2025-58581 was published Oct 6, 2025
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace... Low Unreviewed
CVE-2025-58589 was published Oct 6, 2025
An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability... Moderate Unreviewed
CVE-2025-60449 was published Oct 3, 2025
The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to... Critical Unreviewed
CVE-2025-9209 was published Oct 3, 2025
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android ... High Unreviewed
CVE-2025-59405 was published Oct 2, 2025
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the... High Unreviewed
CVE-2025-56161 was published Oct 2, 2025
Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain... Moderate Unreviewed
CVE-2025-40646 was published Oct 2, 2025
Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated... High Unreviewed
CVE-2025-40645 was published Oct 2, 2025
The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-10744 was published Oct 1, 2025
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and... Moderate Unreviewed
CVE-2025-34220 was published Sep 29, 2025
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this... Moderate Unreviewed
CVE-2025-11079 was published Sep 27, 2025
An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active... Moderate Unreviewed
CVE-2025-45994 was published Sep 26, 2025
Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key... Moderate Unreviewed
CVE-2025-56463 was published Sep 26, 2025
A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part... Moderate Unreviewed
CVE-2025-11028 was published Sep 26, 2025
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is... Moderate Unreviewed
CVE-2025-11026 was published Sep 26, 2025
Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive... Moderate Unreviewed
CVE-2025-36601 was published Sep 25, 2025
The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an... Critical Unreviewed
CVE-2025-57437 was published Sep 22, 2025
The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information... Critical Unreviewed
CVE-2025-57441 was published Sep 22, 2025
Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible... High Unreviewed
CVE-2025-57430 was published Sep 22, 2025
The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability.... Moderate Unreviewed
CVE-2025-57433 was published Sep 22, 2025
An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain... High Unreviewed
CVE-2023-49367 was published Sep 18, 2025
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by... Moderate Unreviewed
CVE-2024-25011 was published Sep 18, 2025
A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Impacted is an... Moderate Unreviewed
CVE-2025-10607 was published Sep 17, 2025
This vulnerability affects Firefox < 143. High Unreviewed
CVE-2025-10535 was published Sep 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database