Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,963
Erlang
39
GitHub Actions
38
Go
2,615
Maven
5,000+
npm
4,255
NuGet
760
pip
4,036
Pub
12
RubyGems
953
Rust
1,049
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,849 advisories

Loading
The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1... Critical Unreviewed
CVE-2025-26850 was published Jul 5, 2025
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform... Moderate Unreviewed
CVE-2025-20300 was published Jul 7, 2025
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025... Moderate Unreviewed
CVE-2025-20999 was published Jul 8, 2025
Cryptographic issue occurs due to use of insecure connection method while downloading. Critical Unreviewed
CVE-2025-21450 was published Jul 8, 2025
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect... High Unreviewed
CVE-2025-49536 was published Jul 8, 2025
An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0... Moderate Unreviewed
CVE-2025-3396 was published Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1... Low Unreviewed
CVE-2025-4972 was published Jul 10, 2025
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1... Low Unreviewed
CVE-2025-6168 was published Jul 10, 2025
An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX... Moderate Unreviewed
CVE-2025-6549 was published Jul 11, 2025
XWiki Rendering is vulnerable to RCE attacks when processing nested macros Critical
CVE-2025-53836 was published for org.xwiki.rendering:xwiki-rendering-transformation-macro (Maven) Jul 14, 2025
renniepak
Credited to renniepak
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component:... High Unreviewed
CVE-2025-30744 was published Jul 15, 2025
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite ... Moderate Unreviewed
CVE-2025-30739 was published Jul 15, 2025
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite ... High Unreviewed
CVE-2025-30743 was published Jul 15, 2025
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that... Low Unreviewed
CVE-2025-30750 was published Jul 15, 2025
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:... Moderate Unreviewed
CVE-2025-30747 was published Jul 15, 2025
Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions... High Unreviewed
CVE-2025-30751 was published Jul 15, 2025
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:... Moderate Unreviewed
CVE-2025-30748 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... Moderate Unreviewed
CVE-2025-50085 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... Moderate Unreviewed
CVE-2025-50084 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services... Moderate Unreviewed
CVE-2025-50086 was published Jul 15, 2025
An incorrect authorization vulnerability allowed unauthorized read access to the contents of... Moderate Unreviewed
CVE-2025-6981 was published Jul 15, 2025
An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud... Critical Unreviewed
CVE-2025-29757 was published Jul 19, 2025
A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux... High Unreviewed
CVE-2025-6018 was published Jul 23, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1... Moderate Unreviewed
CVE-2025-0765 was published Jul 25, 2025
Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the... Moderate Unreviewed
CVE-2025-54596 was published Jul 25, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database