Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,894
Erlang
38
GitHub Actions
38
Go
2,558
Maven
5,000+
npm
4,232
NuGet
751
pip
4,001
Pub
12
RubyGems
953
Rust
1,042
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

129,358 advisories

Loading
The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to Cross-Site Request... Moderate Unreviewed
CVE-2025-10700 was published Oct 16, 2025
A data corruption vulnerability has been identified in the luksmeta utility when used with the... Moderate Unreviewed
CVE-2025-11568 was published Oct 15, 2025
A double free issue was addressed with improved memory management. This issue is fixed in macOS... Moderate Unreviewed
CVE-2025-43282 was published Oct 15, 2025
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.7... Moderate Unreviewed
CVE-2025-43313 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on... Moderate Unreviewed
CVE-2022-49166 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix... Moderate Unreviewed
CVE-2022-49162 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature... Moderate Unreviewed
CVE-2022-49157 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Free irq... Moderate Unreviewed
CVE-2022-49118 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: virtio: use... Moderate Unreviewed
CVE-2022-49146 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: net: preserve skb_end_offset... Moderate Unreviewed
CVE-2022-49142 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: x86/mce: Work around an... Moderate Unreviewed
CVE-2022-49124 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: svm range... Moderate Unreviewed
CVE-2022-49133 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix... Moderate Unreviewed
CVE-2022-49156 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor... Moderate Unreviewed
CVE-2022-49147 was published Oct 15, 2025
In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: properly... Moderate Unreviewed
CVE-2022-49151 was published Oct 15, 2025
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use... Moderate Unreviewed
CVE-2025-54271 was published Oct 15, 2025
Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a... Moderate Unreviewed
CVE-2025-58132 was published Oct 15, 2025
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an... Moderate Unreviewed
CVE-2025-58133 was published Oct 15, 2025
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800... Moderate Unreviewed
CVE-2025-20351 was published Oct 15, 2025
Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could... Moderate Unreviewed
CVE-2025-20359 was published Oct 15, 2025
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and... Moderate Unreviewed
CVE-2025-20329 was published Oct 15, 2025
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM... Moderate Unreviewed
CVE-2025-61933 was published Oct 15, 2025
Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could... Moderate Unreviewed
CVE-2025-20360 was published Oct 15, 2025
A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker... Moderate Unreviewed
CVE-2025-53860 was published Oct 15, 2025
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on... Moderate Unreviewed
CVE-2025-56748 was published Oct 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database