Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,698
Maven
5,000+
npm
4,325
NuGet
761
pip
4,099
Pub
12
RubyGems
958
Rust
1,063
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

106,217 advisories

Loading
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity... High Unreviewed
CVE-2025-12385 was published Dec 3, 2025
A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit... High Unreviewed
CVE-2025-50360 was published Dec 3, 2025
NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper... High Unreviewed
CVE-2025-33211 was published Dec 3, 2025
A flaw was found in Undertow that can cause remote denial of service attacks. When the server... High Unreviewed
CVE-2024-3884 was published Dec 3, 2025
NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper... High Unreviewed
CVE-2025-33201 was published Dec 3, 2025
NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an... High Unreviewed
CVE-2025-33208 was published Dec 3, 2025
Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an... High Unreviewed
CVE-2025-12819 was published Dec 3, 2025
Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its... High Unreviewed
CVE-2025-65843 was published Dec 3, 2025
WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated... High Unreviewed
CVE-2025-66431 was published Dec 3, 2025
In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new... High Unreviewed
CVE-2025-20387 was published Dec 3, 2025
In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new... High Unreviewed
CVE-2025-20386 was published Dec 3, 2025
An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary... High Unreviewed
CVE-2025-54326 was published Dec 3, 2025
AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an... High Unreviewed
CVE-2025-57198 was published Dec 3, 2025
An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An... High Unreviewed
CVE-2025-7044 was published Dec 3, 2025
AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an... High Unreviewed
CVE-2025-57201 was published Dec 3, 2025
Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of... High Unreviewed
CVE-2025-65320 was published Dec 3, 2025
AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an... High Unreviewed
CVE-2025-57199 was published Dec 3, 2025
Akamai Guardicore Platform Agent before 52.1.1 allows an unprivileged user to fully elevate... High Unreviewed
CVE-2025-53841 was published Dec 3, 2025
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information... High Unreviewed
CVE-2025-13947 was published Dec 3, 2025
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up... High Unreviewed
CVE-2025-12744 was published Dec 3, 2025
The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to... High Unreviewed
CVE-2025-13646 was published Dec 3, 2025
The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to... High Unreviewed
CVE-2025-13645 was published Dec 3, 2025
NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer... High Unreviewed
CVE-2025-64298 was published Dec 2, 2025
NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text... High Unreviewed
CVE-2025-64778 was published Dec 2, 2025
NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure... High Unreviewed
CVE-2025-64642 was published Dec 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database