Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,002 advisories

Loading
A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function... Moderate Unreviewed
CVE-2025-10770 was published Sep 22, 2025
A vulnerability has been found in h2oai h2o-3 up to 3.46.08. This affects an unknown function of... Moderate Unreviewed
CVE-2025-10769 was published Sep 22, 2025
A flaw has been found in h2oai h2o-3 up to 3.46.08. The impacted element is an unknown function... Moderate Unreviewed
CVE-2025-10768 was published Sep 22, 2025
A vulnerability was determined in jeecgboot JimuReport up to 2.1.2. Affected is an unknown... Moderate Unreviewed
CVE-2025-10771 was published Sep 22, 2025
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the ... Moderate Unreviewed
CVE-2025-60828 was published Oct 8, 2025
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute... Moderate Unreviewed
CVE-2025-60834 was published Oct 8, 2025
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the... Moderate Unreviewed
CVE-2025-60830 was published Oct 8, 2025
Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on... Critical Unreviewed
CVE-2025-10363 was published Oct 6, 2025
IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code... Critical Unreviewed
CVE-2023-49886 was published Oct 6, 2025
A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0... Moderate Unreviewed
CVE-2025-5326 was published May 29, 2025
A potential security vulnerability has been identified in the Poly Clariti Manager for versions... Low Unreviewed
CVE-2025-43489 was published Jul 23, 2025
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows... High Unreviewed
CVE-2024-11839 was published Dec 13, 2024
MLFlow unsafe deserialization High
CVE-2024-37059 was published for mlflow (pip) Jun 4, 2024
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an... High Unreviewed
CVE-2024-45084 was published Feb 19, 2025
In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code... Critical Unreviewed
CVE-2025-58384 was published Sep 26, 2025
Monai: Unsafe use of Pickle deserialization may lead to RCE High
CVE-2025-58757 was published for monai (pip) Sep 9, 2025
h3rrr
Credited to h3rrr
MONAI: Unsafe torch usage may lead to arbitrary code execution High
CVE-2025-58756 was published for monai (pip) Sep 9, 2025
h3rrr
Credited to h3rrr
ml-logger deserialization vulnerability Low
CVE-2025-10950 was published for ml-logger (pip) Sep 25, 2025
Keras is vulnerable to Deserialization of Untrusted Data High
CVE-2025-9906 was published for keras (pip) Sep 19, 2025
cai0duque
Credited to cai0duque
H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL Critical
CVE-2024-45758 was published for ai.h2o:h2o-core (Maven) Sep 6, 2024
SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy... Critical Unreviewed
CVE-2025-26399 was published Sep 23, 2025
Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support allows Object... High Unreviewed
CVE-2025-58662 was published Sep 22, 2025
Deserialization of Untrusted Data vulnerability in ConveyThis Language Translate Widget for... High Unreviewed
CVE-2025-57919 was published Sep 22, 2025
Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector allows Object... High Unreviewed
CVE-2025-53465 was published Sep 22, 2025
H2O affected by a deserialization vulnerability Critical
CVE-2025-6544 was published for ai.h2o:h2o-core (Maven) Sep 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database