Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

6 advisories

Loading
AngularJS allows attackers to bypass common image source restrictions Low
CVE-2024-8373 was published for angular (npm) Sep 9, 2024
Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5... High Unreviewed
CVE-2024-39283 was published Aug 14, 2024
PrivateBin allows shortening of URLs for other domains Moderate
CVE-2024-39899 was published for privatebin/privatebin (Composer) Jul 10, 2024
nbxiglk0
CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. Moderate Unreviewed
CVE-2024-32162 was published Apr 17, 2024
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering... High Unreviewed
CVE-2023-31172 was published Aug 31, 2023
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0... Moderate Unreviewed
CVE-2023-1076 was published Mar 27, 2023
ProTip! Advisories are also available from the GraphQL API