GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
3,553 advisories
Filter by severity
Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed...
High
Unreviewed
CVE-2025-12726
was published
Nov 10, 2025
An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC...
High
Unreviewed
CVE-2025-12405
was published
Nov 10, 2025
Improper privilege management during pre-MFA cookie handling in Devolutions Server 2025.3.5.0 and...
High
Unreviewed
CVE-2025-12485
was published
Nov 6, 2025
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with...
Critical
Unreviewed
CVE-2025-46364
was published
Nov 5, 2025
The service employed by Everything, running as SYSTEM, communicates with the lower privileged...
High
Unreviewed
CVE-2025-12683
was published
Nov 4, 2025
Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an...
Critical
Unreviewed
CVE-2024-13997
was published
Nov 4, 2025
The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to,...
Critical
Unreviewed
CVE-2025-8900
was published
Nov 3, 2025
The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor...
Critical
Unreviewed
CVE-2025-8489
was published
Oct 31, 2025
Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to...
High
Unreviewed
CVE-2024-14004
was published
Oct 31, 2025
Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System...
Critical
Unreviewed
CVE-2024-14009
was published
Oct 31, 2025
An issue in NCR Atleos Terminal Manager (ConfigApp) v3.4.0 allows attackers to escalate...
High
Unreviewed
CVE-2025-61429
was published
Oct 29, 2025
Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4:...
Critical
Unreviewed
CVE-2025-12424
was published
Oct 28, 2025
Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Critical
Unreviewed
CVE-2025-12425
was published
Oct 28, 2025
By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with...
High
Unreviewed
CVE-2025-1037
was published
Oct 28, 2025
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege...
Moderate
Unreviewed
CVE-2021-43768
was published
Oct 24, 2025
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is...
High
Unreviewed
CVE-2025-11086
was published
Oct 22, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Moderate
Unreviewed
CVE-2025-62592
was published
Oct 21, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
Moderate
Unreviewed
CVE-2025-61759
was published
Oct 21, 2025
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4...
Low
Unreviewed
CVE-2025-5496
was published
Oct 21, 2025
An attacker may obtain the root shell on the underlying OS system with the restricted conditions...
High
Unreviewed
CVE-2025-7851
was published
Oct 21, 2025
The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for...
High
Unreviewed
CVE-2025-6042
was published
Oct 15, 2025
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx....
High
Unreviewed
CVE-2025-9067
was published
Oct 14, 2025
Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability...
Moderate
Unreviewed
CVE-2025-56747
was published
Oct 14, 2025
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer...
High
Unreviewed
CVE-2025-9068
was published
Oct 14, 2025
The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,...
Critical
Unreviewed
CVE-2025-11533
was published
Oct 11, 2025
ProTip!
Advisories are also available from the
GraphQL API