GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,856
Erlang
36
GitHub Actions
36
Go
2,488
Maven
5,000+
npm
4,104
NuGet
735
pip
3,923
Pub
12
RubyGems
945
Rust
1,017
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,326 advisories
Filter by severity
In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input...
Moderate
Unreviewed
CVE-2025-22425
was published
Sep 4, 2025
Apache DolphinScheduler Incorrect Default Permissions Vulnerability
Low
CVE-2024-43166
was published
for
org.apache.dolphinscheduler:dolphinscheduler
(Maven)
Sep 3, 2025
Multiple i-フィルター products contain an issue with incorrect default permissions. If this...
High
Unreviewed
CVE-2025-57846
was published
Aug 27, 2025
The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local...
Moderate
Unreviewed
CVE-2025-9190
was published
Aug 26, 2025
The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local...
Moderate
Unreviewed
CVE-2025-53813
was published
Aug 26, 2025
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local...
Moderate
Unreviewed
CVE-2025-53811
was published
Aug 26, 2025
An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local...
High
Unreviewed
CVE-2025-8098
was published
Aug 18, 2025
Incorrect default permissions for some Intel(R) Distribution for Python software installers...
Moderate
Unreviewed
CVE-2025-26470
was published
Aug 12, 2025
Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may...
Moderate
Unreviewed
CVE-2025-27559
was published
Aug 12, 2025
Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may...
Moderate
Unreviewed
CVE-2025-20087
was published
Aug 12, 2025
Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an...
Moderate
Unreviewed
CVE-2025-20023
was published
Aug 12, 2025
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and...
Moderate
Unreviewed
CVE-2025-8672
was published
Aug 11, 2025
operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Moderate
CVE-2025-7195
was published
for
github.com/operator-framework/operator-sdk
(Go)
Aug 7, 2025
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager ...
Moderate
Unreviewed
CVE-2024-39347
was published
Aug 7, 2025
4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
Moderate
Unreviewed
CVE-2024-55398
was published
Aug 6, 2025
Certain Draytek products are affected by Insecure Permissions. This affects AP903 v1.4.18 and...
High
Unreviewed
CVE-2025-44643
was published
Aug 4, 2025
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged...
Moderate
Unreviewed
CVE-2025-41658
was published
Aug 4, 2025
Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0...
High
Unreviewed
CVE-2025-52361
was published
Aug 1, 2025
CVE-2025-49082 is a vulnerability in the management console
of Absolute Secure Access prior to...
Moderate
Unreviewed
CVE-2025-49082
was published
Jul 31, 2025
CVE-2025-49084 is a vulnerability in the management console
of Absolute Secure Access prior to...
Moderate
Unreviewed
CVE-2025-49084
was published
Jul 31, 2025
CVE-2025-54085 is a vulnerability in the management console
of Absolute Secure Access prior to...
Moderate
Unreviewed
CVE-2025-54085
was published
Jul 31, 2025
In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory...
High
Unreviewed
CVE-2025-54530
was published
Jul 28, 2025
Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update...
High
Unreviewed
CVE-2025-45467
was published
Jul 25, 2025
During the AWS Client VPN client installation on Windows devices, the install process references...
High
Unreviewed
CVE-2025-8069
was published
Jul 23, 2025
The `username:password` part was not correctly stripped from URLs in CSP reports potentially...
Critical
Unreviewed
CVE-2025-8031
was published
Jul 22, 2025
ProTip!
Advisories are also available from the
GraphQL API