Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,447 advisories

Loading
IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform... Moderate Unreviewed
CVE-2023-43037 was published Apr 10, 2025
An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks... High Unreviewed
CVE-2025-30649 was published Apr 9, 2025
An Improper Input Validation vulnerability in the Juniper DHCP Daemon (jdhcpd) of Juniper... High Unreviewed
CVE-2025-30648 was published Apr 9, 2025
CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality... High Unreviewed
CVE-2025-2223 was published Apr 9, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input... Moderate Unreviewed
CVE-2025-30294 was published Apr 8, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input... Moderate Unreviewed
CVE-2025-30293 was published Apr 8, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input... Critical Unreviewed
CVE-2025-24446 was published Apr 8, 2025
Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate... High Unreviewed
CVE-2025-29811 was published Apr 8, 2025
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2025-29821 was published Apr 8, 2025
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to... High Unreviewed
CVE-2025-27737 was published Apr 8, 2025
Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate... High Unreviewed
CVE-2025-27731 was published Apr 8, 2025
Improper input validation in Azure Local allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2025-27489 was published Apr 8, 2025
Improper input validation in Windows Kerberos allows an unauthorized attacker to elevate... High Unreviewed
CVE-2025-26647 was published Apr 8, 2025
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate... High Unreviewed
CVE-2025-24074 was published Apr 8, 2025
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate... High Unreviewed
CVE-2025-24062 was published Apr 8, 2025
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate... High Unreviewed
CVE-2025-24060 was published Apr 8, 2025
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate... High Unreviewed
CVE-2025-24058 was published Apr 8, 2025
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate... High Unreviewed
CVE-2025-24073 was published Apr 8, 2025
A vulnerability has been found in opplus springboot-admin up to... Moderate Unreviewed
CVE-2025-3413 was published Apr 8, 2025
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7.... Moderate Unreviewed
CVE-2025-3250 was published Apr 4, 2025
A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the... Moderate Unreviewed
CVE-2025-3165 was published Apr 3, 2025
Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that... High Unreviewed
CVE-2025-30080 was published Apr 2, 2025
Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger... High Unreviewed
CVE-2024-37917 was published Apr 2, 2025
A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a... High Unreviewed
CVE-2024-39780 was published Apr 2, 2025
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52... Moderate Unreviewed
CVE-2025-3070 was published Apr 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database