Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,464
Erlang
33
GitHub Actions
22
Go
2,163
Maven
5,000+
npm
3,821
NuGet
696
pip
3,502
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+

125,328 advisories

Loading
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net Moderate
CVE-2025-22870 was published for golang.org/x/net (Go) Mar 12, 2025
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite Moderate
CVE-2025-27794 was published for flarum/core (Composer) Mar 12, 2025
novacuum imorland
A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker... Moderate Unreviewed
CVE-2025-0118 was published Mar 12, 2025
A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the... Moderate Unreviewed
CVE-2025-0115 was published Mar 12, 2025
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall... Moderate Unreviewed
CVE-2025-0116 was published Mar 12, 2025
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local... Moderate Unreviewed
CVE-2025-20177 was published Mar 12, 2025
CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause... Moderate Unreviewed
CVE-2025-2002 was published Mar 12, 2025
Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of... Moderate Unreviewed
CVE-2025-25566 was published Mar 12, 2025
An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML... Moderate Unreviewed
CVE-2024-34398 was published Mar 12, 2025
AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF... Moderate Unreviewed
CVE-2025-25683 was published Mar 12, 2025
An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a... Moderate Unreviewed
CVE-2025-25774 was published Mar 12, 2025
Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record Moderate
CVE-2025-27017 was published for org.apache.nifi:nifi-mongodb-services (Maven) Mar 12, 2025
Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin Moderate
CVE-2025-27867 was published for org.apache.felix:org.apache.felix.http.webconsoleplugin (Maven) Mar 12, 2025
Duplicate Advisory: Plenti - Code Injection - Denial of Services Moderate
GHSA-323w-6p85-26fr was published for github.com/plentico/plenti (Go) Mar 12, 2025 • withdrawn
A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS... Moderate Unreviewed
CVE-2025-20145 was published Mar 12, 2025
Xerox Desktop Print Experience application contains a Local Privilege Escalation (LPE)... Moderate Unreviewed
CVE-2025-1984 was published Mar 12, 2025
A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS... Moderate Unreviewed
CVE-2025-20144 was published Mar 12, 2025
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local... Moderate Unreviewed
CVE-2025-20143 was published Mar 12, 2025
laravel-crud-wizard-free has File Validation Bypass Moderate
GHSA-3wgq-h4fr-cwg5 was published for macropay-solutions/laravel-crud-wizard-free (Composer) Mar 12, 2025
XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations... Moderate Unreviewed
CVE-2024-27763 was published Mar 12, 2025
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site... Moderate Unreviewed
CVE-2025-27915 was published Mar 12, 2025
Apache Camel Message Header Injection through request parameters Moderate
CVE-2025-29891 was published for org.apache.camel:camel-support (Maven) Mar 12, 2025
In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible Moderate Unreviewed
CVE-2025-29904 was published Mar 12, 2025
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks... Moderate Unreviewed
CVE-2025-21590 was published Mar 12, 2025
In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure... Moderate Unreviewed
CVE-2025-29903 was published Mar 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database