Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

3,831 advisories

Loading
In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to... High Unreviewed
CVE-2022-20356 was published Aug 11, 2022
Elevation of Privilege Critical Unreviewed
CVE-2025-36890 was published Sep 4, 2025
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to... Moderate Unreviewed
CVE-2025-2713 was published Mar 28, 2025
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a... High Unreviewed
CVE-2025-32345 was published Sep 4, 2025
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a... High Unreviewed
CVE-2025-26435 was published Sep 5, 2025
An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve... Moderate Unreviewed
CVE-2025-32098 was published Sep 5, 2025
In AccessibilityServiceConnection.java, there is a possible background activity launch due to a... High Unreviewed
CVE-2025-26462 was published Sep 5, 2025
Apache Hadoop: Temporary File Local Information Disclosure Low
CVE-2024-23454 was published for org.apache.hadoop:hadoop-common (Maven) Sep 25, 2024
oscerd
Credited to oscerd
frost-core: refresh shares with smaller min_signers will reduce security of group Moderate
CVE-2025-58359 was published for frost-core (Rust) Sep 3, 2025
Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to... High Unreviewed
CVE-2024-11206 was published Nov 14, 2024
Elevation of privilege High Unreviewed
CVE-2025-36891 was published Sep 4, 2025
N/A Critical Unreviewed
CVE-2025-36904 was published Sep 4, 2025
N/A High Unreviewed
CVE-2025-36901 was published Sep 4, 2025
N/A Critical Unreviewed
CVE-2025-36896 was published Sep 4, 2025
An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a... Low Unreviewed
CVE-2025-31286 was published Apr 2, 2025
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that... Moderate Unreviewed
CVE-2024-3470 was published Apr 19, 2024
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that... Moderate Unreviewed
CVE-2024-1908 was published Mar 21, 2024
Improper Privilege Management in djangorestframework-simplejwt Low
CVE-2024-22513 was published for djangorestframework-simplejwt (pip) Mar 16, 2024
r3kumar dmdhrumilmistry
Credited to r3kumar and dmdhrumilmistry
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the... High Unreviewed
CVE-2024-46916 was published Aug 29, 2025
, aka 'DirectX Graphics Kernel Elevation of Privilege Vulnerability'. High Unreviewed
CVE-2020-17137 was published May 24, 2022
, aka 'Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability'. This CVE ID... High Unreviewed
CVE-2020-17136 was published May 24, 2022
, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from... High Unreviewed
CVE-2020-16962 was published May 24, 2022
, aka 'Windows Digital Media Receiver Elevation of Privilege Vulnerability'. High Unreviewed
CVE-2020-17097 was published May 24, 2022
, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from... High Unreviewed
CVE-2020-16961 was published May 24, 2022
, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from... High Unreviewed
CVE-2020-16964 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database