Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,153
Maven
5,000+
npm
3,818
NuGet
693
pip
3,492
Pub
12
RubyGems
902
Rust
903
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

246,975 advisories

Loading
An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows... High Unreviewed
CVE-2025-27822 was published Mar 8, 2025
An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary... Unknown Unreviewed
CVE-2024-42733 was published Mar 7, 2025
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to... Moderate Unreviewed
CVE-2025-26643 was published Mar 7, 2025
Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-2024 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer... Moderate Unreviewed
CVE-2022-49727 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix... Moderate Unreviewed
CVE-2022-49718 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer... Moderate Unreviewed
CVE-2022-49728 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix... Moderate Unreviewed
CVE-2022-49717 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic/realview: Fix... Moderate Unreviewed
CVE-2022-49719 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of... High Unreviewed
CVE-2022-49720 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL... Moderate Unreviewed
CVE-2022-49731 was published Mar 7, 2025
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory... Moderate Unreviewed
CVE-2022-49729 was published Mar 7, 2025
IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE... High Unreviewed
CVE-2025-0162 was published Mar 7, 2025
A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If... Moderate Unreviewed
CVE-2024-53696 was published Mar 7, 2025
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system... Low Unreviewed
CVE-2024-53697 was published Mar 7, 2025
A command injection vulnerability has been reported to affect QHora. If exploited, the... Moderate Unreviewed
CVE-2024-53700 was published Mar 7, 2025
A double free vulnerability has been reported to affect several QNAP operating system versions.... Low Unreviewed
CVE-2024-53698 was published Mar 7, 2025
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system... Low Unreviewed
CVE-2024-53699 was published Mar 7, 2025
A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If... Moderate Unreviewed
CVE-2024-53695 was published Mar 7, 2025
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system... Low Unreviewed
CVE-2024-38638 was published Mar 7, 2025
An improper certificate validation vulnerability has been reported to affect Helpdesk. If... High Unreviewed
CVE-2024-50394 was published Mar 7, 2025
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported... Moderate Unreviewed
CVE-2024-50405 was published Mar 7, 2025
A command injection vulnerability has been reported to affect QHora. If exploited, the... High Unreviewed
CVE-2024-50390 was published Mar 7, 2025
A files or directories accessible to external parties vulnerability has been reported to affect... Moderate Unreviewed
CVE-2024-48864 was published Mar 7, 2025
IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper... Moderate Unreviewed
CVE-2023-35894 was published Mar 7, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database