GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,780
Erlang
36
GitHub Actions
29
Go
2,339
Maven
5,000+
npm
3,973
NuGet
719
pip
3,769
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
259 advisories
Filter by severity
Users’ product account authentication data was stored in clear text in The Genie Company Aladdin...
Moderate
Unreviewed
CVE-2023-5879
was published
Jan 3, 2024
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-3678
was published
Apr 26, 2024
`bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree...
Moderate
Unreviewed
CVE-2024-25940
was published
Feb 15, 2024
The TeleMessage service through 2025-05-05 implements authentication through a long-lived...
Moderate
Unreviewed
CVE-2025-48929
was published
May 28, 2025
Serialized configuration information may be disclosed during device commissioning while using...
Moderate
Unreviewed
CVE-2024-13954
was published
May 22, 2025
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in...
Low
Unreviewed
CVE-2024-23217
was published
Jan 23, 2024
Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4...
Moderate
Unreviewed
CVE-2022-28170
was published
Oct 26, 2022
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS...
Low
Unreviewed
CVE-2022-32867
was published
Nov 2, 2022
Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the...
High
Unreviewed
CVE-2025-45242
was published
May 5, 2025
Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to...
High
Unreviewed
CVE-2025-46627
was published
May 2, 2025
An issue existed with the file paths used to store website data. The issue was resolved by...
Moderate
Unreviewed
CVE-2022-32833
was published
Dec 15, 2022
SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where...
Moderate
Unreviewed
CVE-2017-16560
was published
May 13, 2022
** UNSUPPPORTED WHEN ASSIGNED **
Sending some requests in the web application of the...
High
Unreviewed
CVE-2023-41965
was published
Sep 18, 2023
Logins saved by Firefox should be managed by the Password Manager component which uses encryption...
Low
Unreviewed
CVE-2022-42931
was published
Dec 22, 2022
During iframe navigation, certain pages did not have their FeaturePolicy fully initialized...
Moderate
Unreviewed
CVE-2022-40959
was published
Dec 22, 2022
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially...
Moderate
Unreviewed
CVE-2025-2440
was published
Apr 9, 2025
Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to...
High
Unreviewed
CVE-2025-29809
was published
Apr 8, 2025
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in...
Low
Unreviewed
CVE-2024-23232
was published
Mar 8, 2024
This issue was addressed through improved state management. This issue is fixed in macOS Ventura...
Moderate
Unreviewed
CVE-2025-24138
was published
Jan 28, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7.2, macOS...
Moderate
Unreviewed
CVE-2024-54547
was published
Jan 28, 2025
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in...
Critical
Unreviewed
CVE-2025-24109
was published
Jan 28, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Ventura...
Moderate
Unreviewed
CVE-2024-54541
was published
Jan 28, 2025
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24108
was published
Jan 28, 2025
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24103
was published
Jan 28, 2025
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4...
High
Unreviewed
CVE-2024-28069
was published
Mar 16, 2024
ProTip!
Advisories are also available from the
GraphQL API