GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,969
Erlang
39
GitHub Actions
38
Go
2,624
Maven
5,000+
npm
4,257
NuGet
760
pip
4,050
Pub
12
RubyGems
953
Rust
1,052
Swift
45
Unreviewed advisories
All unreviewed
5,000+
1,194 advisories
Filter by severity
Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh...
Critical
Unreviewed
CVE-2025-52936
was published
Jun 23, 2025
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local...
Moderate
Unreviewed
CVE-2025-30642
was published
Jun 17, 2025
A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security...
High
Unreviewed
CVE-2025-30641
was published
Jun 17, 2025
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local...
High
Unreviewed
CVE-2025-30640
was published
Jun 17, 2025
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local...
High
Unreviewed
CVE-2025-49156
was published
Jun 17, 2025
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a...
High
Unreviewed
CVE-2025-49157
was published
Jun 17, 2025
os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the...
Moderate
Unreviewed
CVE-2025-0913
was published
Jun 11, 2025
Improper link resolution before file access ('link following') in Windows Installer allows an...
High
Unreviewed
CVE-2025-33075
was published
Jun 10, 2025
Improper link resolution before file access ('link following') in Windows Recovery Driver allows...
High
Unreviewed
CVE-2025-32721
was published
Jun 10, 2025
2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2025-5474
was published
Jun 6, 2025
A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop...
High
Unreviewed
CVE-2024-54189
was published
Jun 3, 2025
A privilege escalation vulnerability exists in the virtual machine archive restoration...
High
Unreviewed
CVE-2024-36486
was published
Jun 3, 2025
A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop...
High
Unreviewed
CVE-2024-52561
was published
Jun 3, 2025
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with...
High
Unreviewed
CVE-2024-11857
was published
Jun 2, 2025
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-31198
was published
May 30, 2025
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based)...
High
Unreviewed
CVE-2025-47181
was published
May 23, 2025
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless...
Moderate
Unreviewed
CVE-2025-2102
was published
May 21, 2025
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local...
Moderate
Unreviewed
CVE-2025-3908
was published
May 19, 2025
Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine...
High
Unreviewed
CVE-2025-4211
was published
May 16, 2025
Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver...
High
Unreviewed
CVE-2025-20003
was published
May 13, 2025
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an...
High
Unreviewed
CVE-2025-29975
was published
May 13, 2025
Improper link resolution before file access ('link following') in Windows Installer allows an...
Moderate
Unreviewed
CVE-2025-29837
was published
May 13, 2025
Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's...
High
Unreviewed
CVE-2025-1079
was published
May 12, 2025
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non...
Moderate
Unreviewed
CVE-2025-22247
was published
May 12, 2025
Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira...
High
Unreviewed
CVE-2024-9524
was published
May 9, 2025
ProTip!
Advisories are also available from the
GraphQL API