Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

827 advisories

Loading
Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from... Critical Unreviewed
CVE-2025-34292 was published Oct 27, 2025
Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue... Critical Unreviewed
CVE-2025-62025 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows... Critical Unreviewed
CVE-2025-60214 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows... Critical Unreviewed
CVE-2025-60225 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows... Critical Unreviewed
CVE-2025-60226 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object... Critical Unreviewed
CVE-2025-60213 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows... Critical Unreviewed
CVE-2025-60238 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase... Critical Unreviewed
CVE-2025-60232 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection... Critical Unreviewed
CVE-2025-60039 was published Oct 22, 2025
The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to,... Critical Unreviewed
CVE-2017-20206 was published Oct 18, 2025
The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to,... Critical Unreviewed
CVE-2017-20207 was published Oct 18, 2025
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login... Critical Unreviewed
CVE-2017-20208 was published Oct 18, 2025
Keras framework vulnerable to deserialization of untrusted data Critical
CVE-2025-49655 was published for keras (pip) Oct 17, 2025
pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer Critical
CVE-2025-62515 was published for pyquokka (pip) Oct 17, 2025
Chenpinji
Credited to Chenpinji
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability Critical
CVE-2025-54539 was published for Apache.NMS.AMQP (NuGet) Oct 16, 2025
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized... Critical Unreviewed
CVE-2025-59287 was published Oct 14, 2025
scio is vunerable to Remote Command Execution through PyTorch Critical
GHSA-m9mp-6x32-5rhg was published for scio-pypi (pip) Oct 9, 2025
eliegoudout
Credited to eliegoudout
Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on... Critical Unreviewed
CVE-2025-10363 was published Oct 6, 2025
IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code... Critical Unreviewed
CVE-2023-49886 was published Oct 6, 2025
Apache Pyfory python is vulnerable to deserialization of untrusted data Critical
CVE-2025-61622 was published for pyfory (pip) Oct 1, 2025
In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code... Critical Unreviewed
CVE-2025-58384 was published Sep 26, 2025
Apache IoTDB: Deserialization of untrusted Data Critical
CVE-2025-48459 was published for org.apache.iotdb:iotdb-confignode (Maven) Sep 24, 2025
cai0duque
Credited to cai0duque
SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy... Critical Unreviewed
CVE-2025-26399 was published Sep 23, 2025
H2O affected by a deserialization vulnerability Critical
CVE-2025-6544 was published for ai.h2o:h2o-core (Maven) Sep 22, 2025
Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an... Critical Unreviewed
CVE-2025-55232 was published Sep 9, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database