Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,316
Maven
5,000+
npm
5,000+
NuGet
1,030
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,493
Swift
61
Unreviewed advisories
All unreviewed
5,000+

171 advisories

Loading
Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack... High Unreviewed
CVE-2025-49715 was published Jun 20, 2025
Weblate exposes personal IP address via e-mail Low
CVE-2025-49134 was published for weblate (pip) Jun 16, 2025
amCap1712 Credited to amCap1712 and nijel nijel nijel
Exposure of private personal information to an unauthorized actor in the user vaults component of... High Unreviewed
CVE-2025-5334 was published May 29, 2025
Sensitive device logger information in ASPECT may be exposed if administrator credentials become... Moderate Unreviewed
CVE-2024-13953 was published May 22, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17... Moderate Unreviewed
CVE-2025-0679 was published May 22, 2025
Insufficient default configuration in HCL Leap allows anonymous access to directory information. Moderate Unreviewed
CVE-2023-45721 was published May 1, 2025
Insufficient default configuration in HCL Leap allows anonymous access to directory information. Moderate Unreviewed
CVE-2023-45720 was published Apr 24, 2025
Zabbix API user.get returns all users that share common group with the calling user. This... Low Unreviewed
CVE-2024-42325 was published Apr 2, 2025
By first using the AI chatbot in one tab and later activating it in another tab, the document... Moderate Unreviewed
CVE-2025-3035 was published Apr 1, 2025
An information disclosure vulnerability exists in the latest version of transformeroptimus... High Unreviewed
CVE-2024-10267 was published Mar 20, 2025
A vulnerability in Intrexx Portal Server 12.0.2 and earlier which was classified as problematic... Moderate Unreviewed
CVE-2025-26816 was published Mar 19, 2025
Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote... Moderate Unreviewed
CVE-2025-27080 was published Mar 18, 2025
A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with... Moderate Unreviewed
CVE-2025-25042 was published Mar 18, 2025
The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive... Moderate Unreviewed
CVE-2024-13228 was published Mar 11, 2025
Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an... High Unreviewed
CVE-2024-11216 was published Mar 5, 2025
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition... Low Unreviewed
CVE-2025-1939 was published Mar 4, 2025
An attacker could expose cross-user personal identifiable information (PII) and personal health... High Unreviewed
CVE-2025-20060 was published Feb 28, 2025
The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2024-13217 was published Feb 27, 2025
The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist... Moderate Unreviewed
CVE-2025-20615 was published Feb 14, 2025
The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings... Moderate Unreviewed
CVE-2024-12041 was published Feb 1, 2025
The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-13216 was published Jan 31, 2025
In its default configuration, the affected product transmits plain-text patient data to a hard... High Unreviewed
CVE-2025-0683 was published Jan 30, 2025
Updatecli exposes Maven credentials in console output High
CVE-2025-24355 was published for github.com/updatecli/updatecli (Go) Jan 24, 2025
gionn Credited to gionn and olblak olblak olblak
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure... Moderate Unreviewed
CVE-2024-13215 was published Jan 15, 2025
The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is... Moderate Unreviewed
CVE-2024-11396 was published Jan 14, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database