Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,154
NuGet
736
pip
3,953
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+

1,336 advisories

Loading
A local attacker with low privileges on the Windows system where the software is installed can... Moderate Unreviewed
CVE-2025-53947 was published Sep 18, 2025
Dragonfly's directories created via os.MkdirAll are not checked for permissions Low
CVE-2025-59349 was published for github.com/dragonflyoss/dragonfly (Go) Sep 17, 2025
gaius-qi
CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability.... High Unreviewed
CVE-2025-57625 was published Sep 16, 2025
Certain files with overly permissive permissions were identified in the out-of-support Control-M... Moderate Unreviewed
CVE-2025-55111 was published Sep 16, 2025
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect... High Unreviewed
CVE-2025-43887 was published Sep 10, 2025
Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s)... High Unreviewed
CVE-2025-43725 was published Sep 10, 2025
An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that,... High Unreviewed
CVE-2025-10231 was published Sep 10, 2025
In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input... Moderate Unreviewed
CVE-2025-22425 was published Sep 4, 2025
Apache DolphinScheduler Incorrect Default Permissions Vulnerability Low
CVE-2024-43166 was published for org.apache.dolphinscheduler:dolphinscheduler (Maven) Sep 3, 2025
Multiple i-フィルター products contain an issue with incorrect default permissions. If this... High Unreviewed
CVE-2025-57846 was published Aug 27, 2025
The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local... Moderate Unreviewed
CVE-2025-9190 was published Aug 26, 2025
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local... Moderate Unreviewed
CVE-2025-53811 was published Aug 26, 2025
The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local... Moderate Unreviewed
CVE-2025-53813 was published Aug 26, 2025
An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local... High Unreviewed
CVE-2025-8098 was published Aug 18, 2025
Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may... Moderate Unreviewed
CVE-2025-27559 was published Aug 12, 2025
Incorrect default permissions for some Intel(R) Distribution for Python software installers... Moderate Unreviewed
CVE-2025-26470 was published Aug 12, 2025
Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may... Moderate Unreviewed
CVE-2025-20087 was published Aug 12, 2025
Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an... Moderate Unreviewed
CVE-2025-20023 was published Aug 12, 2025
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and... Moderate Unreviewed
CVE-2025-8672 was published Aug 11, 2025
operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd Moderate
CVE-2025-7195 was published for github.com/operator-framework/operator-sdk (Go) Aug 7, 2025
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager ... Moderate Unreviewed
CVE-2024-39347 was published Aug 7, 2025
4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions. Moderate Unreviewed
CVE-2024-55398 was published Aug 6, 2025
Certain Draytek products are affected by Insecure Permissions. This affects AP903 v1.4.18 and... High Unreviewed
CVE-2025-44643 was published Aug 4, 2025
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged... Moderate Unreviewed
CVE-2025-41658 was published Aug 4, 2025
Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0... High Unreviewed
CVE-2025-52361 was published Aug 1, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database