GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,963
Erlang
39
GitHub Actions
38
Go
2,615
Maven
5,000+
npm
4,255
NuGet
760
pip
4,036
Pub
12
RubyGems
953
Rust
1,049
Swift
45
Unreviewed advisories
All unreviewed
5,000+
991 advisories
Filter by severity
An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated...
Critical
Unreviewed
CVE-2024-52786
was published
Aug 22, 2025
Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the...
Critical
Unreviewed
CVE-2011-10026
was published
Aug 20, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in thehp Global DNS...
Critical
Unreviewed
CVE-2025-53577
was published
Aug 20, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Jordy Meow Code Engine...
Critical
Unreviewed
CVE-2025-48169
was published
Aug 20, 2025
The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to...
Critical
Unreviewed
CVE-2025-8723
was published
Aug 19, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML...
Critical
Unreviewed
CVE-2025-49887
was published
Aug 14, 2025
Duplicate Advisory: Flowise vulnerable to RCE via Dynamic function constructor injection
Critical
GHSA-q4xx-mc3q-23x8
was published
for
flowise
(npm)
Aug 14, 2025
•
withdrawn
myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The...
Critical
Unreviewed
CVE-2011-10018
was published
Aug 13, 2025
Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its...
Critical
Unreviewed
CVE-2011-10019
was published
Aug 13, 2025
WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where...
Critical
Unreviewed
CVE-2011-10011
was published
Aug 13, 2025
Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common...
Critical
Unreviewed
CVE-2011-10013
was published
Aug 13, 2025
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code...
Critical
Unreviewed
CVE-2025-52385
was published
Aug 13, 2025
SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a...
Critical
Unreviewed
CVE-2025-42950
was published
Aug 12, 2025
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function...
Critical
Unreviewed
CVE-2025-42957
was published
Aug 12, 2025
Privileged OpenBao Operator May Execute Code on the Underlying Host
Critical
CVE-2025-54997
was published
for
github.com/openbao/openbao
(Go)
Aug 8, 2025
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
Critical
Unreviewed
CVE-2025-50692
was published
Aug 7, 2025
An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index...
Critical
Unreviewed
CVE-2025-50707
was published
Aug 5, 2025
The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured...
Critical
Unreviewed
CVE-2025-51387
was published
Aug 4, 2025
Hashicorp Vault has Code Execution Vulnerability via Plugin Configuration
Critical
CVE-2025-6000
was published
for
github.com/hashicorp/vault
(Go)
Aug 1, 2025
langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the...
Critical
Unreviewed
CVE-2025-46059
was published
Jul 29, 2025
smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module
Critical
CVE-2025-5120
was published
for
smolagents
(pip)
Jul 27, 2025
An issue in Gardyn 4 allows a remote attacker execute arbitrary code
Critical
Unreviewed
CVE-2025-29631
was published
Jul 25, 2025
A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience...
Critical
Unreviewed
CVE-2025-34138
was published
Jul 25, 2025
A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe...
Critical
Unreviewed
CVE-2016-15044
was published
Jul 24, 2025
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1...
Critical
Unreviewed
CVE-2018-25114
was published
Jul 23, 2025
ProTip!
Advisories are also available from the
GraphQL API