Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
49
Go
3,479
Maven
5,000+
npm
5,000+
NuGet
886
pip
4,740
Pub
13
RubyGems
1,031
Rust
1,225
Swift
53
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

69 advisories

Loading
2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error... Moderate Unreviewed
CVE-2025-59787 was published Mar 4, 2026
An inconsistent user interface issue was addressed with improved state management. This issue is... Moderate Unreviewed
CVE-2026-20640 was published Feb 12, 2026
Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP... Moderate Unreviewed
CVE-2026-1996 was published Feb 10, 2026
chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass... High Unreviewed
CVE-2025-70758 was published Feb 3, 2026
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This... Critical Unreviewed
CVE-2025-13026 was published Nov 11, 2025
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This... Critical Unreviewed
CVE-2025-13023 was published Nov 11, 2025
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects... Critical Unreviewed
CVE-2025-13021 was published Nov 11, 2025
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects... Critical Unreviewed
CVE-2025-13022 was published Nov 11, 2025
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability... High Unreviewed
CVE-2025-13016 was published Nov 11, 2025
Under undisclosed traffic conditions along with conditions beyond the attacker's control,... High Unreviewed
CVE-2025-58153 was published Oct 15, 2025
A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore... Moderate Unreviewed
CVE-2025-11594 was published Oct 11, 2025
In Permission Manager, there is a possible way for the microphone privacy indicator to remain... Low Unreviewed
CVE-2025-26461 was published Sep 5, 2025
In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server... Moderate Unreviewed
CVE-2025-26456 was published Sep 5, 2025
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic... Moderate Unreviewed
CVE-2025-22413 was published Aug 27, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. A... Moderate Unreviewed
CVE-2025-43240 was published Jul 30, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6.... Moderate Unreviewed
CVE-2025-24188 was published Jul 30, 2025
An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It... High Unreviewed
CVE-2024-47215 was published Apr 3, 2025
When run on commands with certain arguments set, explain may fail to validate these arguments... Moderate Unreviewed
CVE-2025-3084 was published Apr 1, 2025
The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a... High Unreviewed
CVE-2024-50954 was published Jan 15, 2025
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue... Moderate Unreviewed
CVE-2024-55548 was published Dec 10, 2024
The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to... High Unreviewed
CVE-2024-10781 was published Nov 26, 2024
The UltimateAI plugin for WordPress is vulnerable to authentication bypass in all versions up to,... Moderate Unreviewed
CVE-2024-9104 was published Oct 16, 2024
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All... Low Unreviewed
CVE-2024-37995 was published Sep 10, 2024
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All... Moderate Unreviewed
CVE-2024-37992 was published Sep 10, 2024
In wlan, there is a possible denial of service due to incorrect error handling. This could lead... High Unreviewed
CVE-2024-20089 was published Sep 2, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database