Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,814
Erlang
36
GitHub Actions
32
Go
2,399
Maven
5,000+
npm
4,040
NuGet
722
pip
3,829
Pub
12
RubyGems
932
Rust
1,002
Swift
38
Unreviewed advisories
All unreviewed
5,000+

134,502 advisories

Loading
Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically... Moderate Unreviewed
CVE-2025-8321 was published Jul 30, 2025
The vulnerability was identified in the code developed specifically for Lenovo. Please visit ... Moderate Unreviewed
CVE-2025-4424 was published Jul 30, 2025
The vulnerability was identified in the code developed specifically for Lenovo. Please visit ... Moderate Unreviewed
CVE-2025-4426 was published Jul 30, 2025
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11... Moderate Unreviewed
CVE-2024-52894 was published Jul 29, 2025
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a... Moderate Unreviewed
CVE-2025-33114 was published Jul 29, 2025
Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and... Moderate Unreviewed
CVE-2024-43018 was published Jul 29, 2025
Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin... Moderate Unreviewed
CVE-2025-51045 was published Jul 29, 2025
phpgurukul Nipah virus (NiV) Testing Management System 1.0 contains a SQL injection vulnerability... Moderate Unreviewed
CVE-2025-51044 was published Jul 29, 2025
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1... Moderate Unreviewed
CVE-2025-36071 was published Jul 29, 2025
The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for... Moderate Unreviewed
CVE-2025-5684 was published Jul 29, 2025
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11... Moderate Unreviewed
CVE-2024-51473 was published Jul 29, 2025
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11... Moderate Unreviewed
CVE-2024-49828 was published Jul 29, 2025
Moby firewalld reload makes published container ports accessible from remote hosts Moderate
CVE-2025-54388 was published for github.com/docker/docker (Go) Jul 29, 2025
Umbraco Delivery API allows for cached requests to be returned with an invalid API key Moderate
CVE-2025-54425 was published for Umbraco.Cms.Api.Delivery (NuGet) Jul 29, 2025
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm... Moderate Unreviewed
CVE-2025-53712 was published Jul 29, 2025
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a... Moderate Unreviewed
CVE-2025-36010 was published Jul 29, 2025
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm... Moderate Unreviewed
CVE-2025-53711 was published Jul 29, 2025
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm... Moderate Unreviewed
CVE-2025-53713 was published Jul 29, 2025
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm... Moderate Unreviewed
CVE-2025-53714 was published Jul 29, 2025
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm... Moderate Unreviewed
CVE-2025-53715 was published Jul 29, 2025
Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-52284 was published Jul 29, 2025
Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC"... Moderate Unreviewed
CVE-2025-5922 was published Jul 29, 2025
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server... Moderate Unreviewed
CVE-2025-2533 was published Jul 29, 2025
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on... Moderate Unreviewed
CVE-2025-2179 was published Jul 29, 2025
An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain... Moderate Unreviewed
CVE-2025-28171 was published Jul 29, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database