Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

60 advisories

Loading
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed... Critical Unreviewed
CVE-2010-20103 was published Aug 20, 2025
sweetalert2 v9.17.4 and above contains hidden functionality Low
GHSA-pg98-6v7f-2xfv was published for sweetalert2 (npm) Nov 23, 2022
cranberry3148
Credited to cranberry3148
sweetalert2 v8.19.1 and above contains hidden functionality Low
GHSA-8jh9-wqpf-q52c was published for sweetalert2 (npm) Nov 23, 2022
cranberry3148
Credited to cranberry3148
SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged... High Unreviewed
CVE-2025-11673 was published Oct 13, 2025
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It... High Unreviewed
CVE-2025-58778 was published Oct 16, 2025
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF... High Unreviewed
CVE-2021-25371 was published May 24, 2022
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker... Critical Unreviewed
CVE-2024-20439 was published Sep 4, 2024
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM... Low Unreviewed
CVE-2025-47729 was published May 8, 2025
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request... Low Unreviewed
CVE-2025-62773 was published Oct 22, 2025
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file... High Unreviewed
CVE-2025-48416 was published May 21, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database