Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,575
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,523
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

181 advisories

Loading
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... Moderate Unreviewed
CVE-2024-47265 was published Feb 13, 2025
A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts... Moderate Unreviewed
CVE-2025-9920 was published Sep 9, 2025
Dpanel has an arbitrary file read vulnerability Moderate
CVE-2025-53363 was published for github.com/donknap/dpanel (Go) Aug 22, 2025
LTLTLXEY Credited to LTLTLXEY
A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element... Moderate Unreviewed
CVE-2025-9529 was published Aug 27, 2025
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network... Moderate Unreviewed
CVE-2025-20269 was published Aug 20, 2025
External control of file name or path in Windows Security App allows an authorized attacker to... Moderate Unreviewed
CVE-2025-53769 was published Aug 12, 2025
Salt's file contents overwrite the VirtKey class Moderate
CVE-2025-22241 was published for salt (pip) Jun 13, 2025
External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3... Moderate Unreviewed
CVE-2025-36506 was published Jun 13, 2025
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter Moderate
CVE-2025-49138 was published for elmsln/haxcms (Composer) Jun 9, 2025
Indigo-10 Credited to Indigo-10
OctoPrint vulnerable to possible file extraction via upload endpoints Moderate
CVE-2025-48067 was published for OctoPrint (pip) Jun 10, 2025
jacopotediosi Credited to jacopotediosi
External control of file name or path in Windows Security App allows an authorized attacker to... Moderate Unreviewed
CVE-2025-47956 was published Jun 10, 2025
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail... Moderate Unreviewed
CVE-2020-36772 was published Jan 22, 2024
Kea configuration and API directives can be used to overwrite arbitrary files, subject to... Moderate Unreviewed
CVE-2025-32802 was published May 28, 2025
External control of file name or path in Microsoft Defender for Endpoint allows an authorized... Moderate Unreviewed
CVE-2025-26684 was published May 13, 2025
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a... Moderate Unreviewed
CVE-2025-1056 was published Apr 23, 2025
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized... Moderate Unreviewed
CVE-2025-29819 was published Apr 8, 2025
A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x.... Moderate Unreviewed
CVE-2025-2982 was published Mar 31, 2025
Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file... Moderate Unreviewed
CVE-2024-36473 was published Jun 11, 2024
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform... Moderate Unreviewed
CVE-2025-24996 was published Mar 11, 2025
The account file upload functionality in Syspass 3.2.x fails to properly handle special... Moderate Unreviewed
CVE-2025-25478 was published Mar 1, 2025
The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all... Moderate Unreviewed
CVE-2025-1730 was published Mar 1, 2025
A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as... Moderate Unreviewed
CVE-2024-4818 was published May 14, 2024
An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web... Moderate Unreviewed
CVE-2025-0109 was published Feb 12, 2025
NTLM Hash Disclosure Spoofing Vulnerability Moderate Unreviewed
CVE-2025-21377 was published Feb 11, 2025
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti... Moderate Unreviewed
CVE-2024-12058 was published Feb 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database