GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+
35 advisories
Filter by severity
Ignite Realtime Openfire privilege escalation vulnerability
High
CVE-2024-25420
was published
for
org.igniterealtime.openfire:xmppserver
(Maven)
Mar 26, 2024
For migration as well as to work around kernels unaware of L1TF (see
XSA-273), PV guests may be...
High
Unreviewed
CVE-2023-34322
was published
Jan 5, 2024
Internal browser event interfaces were exposed to web content when privileged EventHandler...
High
Unreviewed
CVE-2024-8382
was published
Sep 3, 2024
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network...
High
Unreviewed
CVE-2024-38813
was published
Sep 17, 2024
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate...
Critical
Unreviewed
CVE-2025-53882
was published
Jul 23, 2025
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By...
High
Unreviewed
CVE-2019-18276
was published
May 24, 2022
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping...
Critical
Unreviewed
CVE-2017-6972
was published
May 13, 2022
artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check...
Moderate
Unreviewed
CVE-2006-2916
was published
May 1, 2022
netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
New elements in...
Moderate
Unreviewed
CVE-2023-52433
was published
Feb 20, 2024
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0...
High
Unreviewed
CVE-2025-27396
was published
Mar 11, 2025
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2025-21399
was published
Jan 17, 2025
A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for...
High
Unreviewed
CVE-2025-1003
was published
Feb 4, 2025
Mattermost Server Improper Access Control
Low
CVE-2024-21848
was published
for
github.com/mattermost/mattermost/server/v8
(Go)
Apr 5, 2024
Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker...
Critical
Unreviewed
CVE-2023-34844
was published
Jun 29, 2023
Keycloak vulnerable to impersonation via logout token exchange
Low
CVE-2023-0657
was published
for
org.keycloak:keycloak-services
(Maven)
Apr 17, 2024
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: skip...
Moderate
Unreviewed
CVE-2021-47129
was published
Mar 15, 2024
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification...
Low
Unreviewed
CVE-2023-21246
was published
Jul 13, 2023
In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during...
High
Unreviewed
CVE-2023-35692
was published
Jul 14, 2023
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a...
Moderate
Unreviewed
CVE-2023-26239
was published
Oct 5, 2023
Bitlbee does not drop extra group privileges correctly in unix.c
Critical
Unreviewed
CVE-2012-1187
was published
Apr 23, 2022
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to...
Critical
Unreviewed
CVE-2011-2921
was published
Apr 22, 2022
Improper Privilege Management in Apache Ozone
Critical
CVE-2021-36372
was published
for
org.apache.ozone:ozone-main
(Maven)
Nov 23, 2021
Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE...
High
Unreviewed
CVE-2023-5369
was published
Oct 4, 2023
Apache Superset allows authenticated users to access metadata they have no permission to
Moderate
CVE-2021-37839
was published
for
apache-superset
(pip)
Jul 7, 2022
An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c...
High
Unreviewed
CVE-2021-36762
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API