GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,856
Erlang
36
GitHub Actions
36
Go
2,488
Maven
5,000+
npm
4,104
NuGet
735
pip
3,923
Pub
12
RubyGems
945
Rust
1,017
Swift
39
Unreviewed advisories
All unreviewed
5,000+
317 advisories
Filter by severity
The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to,...
Critical
Unreviewed
CVE-2025-8359
was published
Sep 6, 2025
A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi...
Moderate
Unreviewed
CVE-2023-4957
was published
Oct 11, 2023
Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo allows...
Critical
Unreviewed
CVE-2025-54725
was published
Aug 28, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster...
Critical
Unreviewed
CVE-2025-54738
was published
Aug 28, 2025
An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows...
High
Unreviewed
CVE-2025-34520
was published
Aug 28, 2025
An authentication issue was addressed with improved state management. This issue is fixed in...
High
Unreviewed
CVE-2025-24206
was published
Apr 29, 2025
The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to...
High
Unreviewed
CVE-2025-5060
was published
Aug 23, 2025
The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions...
Critical
Unreviewed
CVE-2025-5821
was published
Aug 23, 2025
The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7...
Critical
Unreviewed
CVE-2025-7642
was published
Aug 23, 2025
An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass...
Moderate
Unreviewed
CVE-2025-55623
was published
Aug 22, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator...
Critical
Unreviewed
CVE-2025-8995
was published
Aug 15, 2025
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025...
Critical
Unreviewed
CVE-2025-50904
was published
Aug 20, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in ABB ASPECT.This issue...
High
Unreviewed
CVE-2025-53187
was published
Aug 11, 2025
An information disclosure vulnerability exists in the /goform/getproductInfo functionality of...
High
Unreviewed
CVE-2025-24496
was published
Aug 20, 2025
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda...
Critical
Unreviewed
CVE-2025-27129
was published
Aug 20, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi...
Critical
Unreviewed
CVE-2025-54713
was published
Aug 20, 2025
An issue in the default configuration of the password reset function in LogicData eCommerce...
Moderate
Unreviewed
CVE-2025-52338
was published
Aug 19, 2025
Liferay Portal Login Bypass Vulnerability
Low
CVE-2025-3639
was published
for
com.liferay.portal:release.portal.bom
(Maven)
Aug 18, 2025
In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a...
Critical
Unreviewed
CVE-2025-51452
was published
Aug 13, 2025
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet...
High
Unreviewed
CVE-2024-26009
was published
Aug 12, 2025
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK...
High
Unreviewed
CVE-2025-40743
was published
Aug 12, 2025
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX...
High
Unreviewed
CVE-2025-40761
was published
Aug 12, 2025
An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval...
High
Unreviewed
CVE-2025-31512
was published
Jul 22, 2025
Apache Tomcat - Security constraint bypass for pre/post-resources
Moderate
CVE-2025-49125
was published
for
org.apache.tomcat.embed:tomcat-embed-core
(Maven)
Jun 16, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExperts Post SMTP...
High
Unreviewed
CVE-2025-24000
was published
Aug 7, 2025
ProTip!
Advisories are also available from the
GraphQL API