GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            17 advisories
        Filter by severity
        
      
      
    
                    
                      Iterator failure vulnerability in the card management module.
Impact: Successful exploitation of...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54612
                      
                      was published
                      Aug 6, 2025 
                    
                  
                    
                      Iterator failure vulnerability in the card management module.
Impact: Successful exploitation of...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54613
                      
                      was published
                      Aug 6, 2025 
                    
                  
                    
                      Iterator failure issue in the WantAgent module.
Impact: Successful exploitation of this...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54621
                      
                      was published
                      Aug 6, 2025 
                    
                  
                    
                      Iterator failure issue in the multi-mode input module.
Impact: Successful exploitation of this...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54619
                      
                      was published
                      Aug 6, 2025 
                    
                  
                    
                      linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-22365
                      
                      was published
                      Feb 6, 2024 
                    
                  
                    
                      In unusual circumstances, selecting text could cause text selection caching to behave incorrectly...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-28287
                      
                      was published
                      Dec 22, 2022 
                    
                  
                    
                      A vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-46144
                      
                      was published
                      Dec 13, 2022 
                    
                  
                    
                      OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-31153
                      
                      was published
                        for
                        
                          openzeppelin-cairo-contracts
                        
                        (pip)
                      Jul 15, 2022 
                    
                  
                    
                      A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-45383
                      
                      was published
                      Sep 12, 2024 
                    
                  
                    
                      plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36774
                      
                      was published
                      Feb 19, 2024 
                    
                  
                    
                      Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-37139
                      
                      was published
                      Jun 26, 2024 
                    
                  
                    
                      Micronaut management endpoints vulnerable to drive-by localhost attack
                    
                      
  Moderate
                    
                
                      
                        CVE-2024-23639
                      
                      was published
                        for
                        
                          io.micronaut:micronaut-http-server
                        
                        (Maven)
                      Feb 9, 2024 
                    
                  
                    
                      
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-44295
                      
                      was published
                      Dec 5, 2023 
                    
                  
                    
                      A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD)...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-20748
                      
                      was published
                      May 4, 2022 
                    
                  
                    
                      In RubyGem excon, interrupted Persistent Connections May Leak Response Data
                    
                      
  Moderate
                    
                
                      
                        CVE-2019-16779
                      
                      was published
                        for
                        
                          excon
                        
                        (RubyGems)
                      Dec 16, 2019 
                    
                  
                    
                      Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-25942
                      
                      was published
                      Apr 4, 2023 
                    
                  
                    
                      Improper Control of a Resource Through its Lifetime in Mattermost
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-1385
                      
                      was published
                        for
                        
                          github.com/mattermost/mattermost-server/v6
                        
                        (Go)
                      Apr 20, 2022 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API