GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
11,449 advisories
Filter by severity
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This...
Low
Unreviewed
CVE-2025-0906
was published
Feb 11, 2025
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This...
Low
Unreviewed
CVE-2025-0911
was published
Feb 11, 2025
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This...
Low
Unreviewed
CVE-2025-0907
was published
Feb 11, 2025
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This...
Low
Unreviewed
CVE-2025-0909
was published
Feb 11, 2025
An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...
Low
Unreviewed
CVE-2023-20507
was published
Feb 11, 2025
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This...
Low
Unreviewed
CVE-2025-0904
was published
Feb 11, 2025
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This...
Low
Unreviewed
CVE-2025-0905
was published
Feb 11, 2025
Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure...
Low
Unreviewed
CVE-2024-12548
was published
Feb 11, 2025
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure...
Low
Unreviewed
CVE-2024-12550
was published
Feb 11, 2025
Server-side Request Forgery (SSRF) in hackney
Low
CVE-2025-1211
was published
for
hackney
(Erlang)
Feb 11, 2025
Apache NiFi: Missing Complete Authorization for Parameter and Service References
Low
CVE-2024-56512
was published
for
org.apache.nifi:nifi-web-api
(Maven)
Dec 28, 2024
1Panel's password verification is suspected to have a timing attack vulnerability
Low
CVE-2024-30257
was published
for
github.com/1Panel-dev/1Panel
(Go)
Apr 18, 2024
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Low
Unreviewed
CVE-2025-24430
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Low
Unreviewed
CVE-2025-24432
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Low
Unreviewed
CVE-2025-24429
was published
Feb 11, 2025
An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0...
Low
Unreviewed
CVE-2024-52966
was published
Feb 11, 2025
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Low
Unreviewed
CVE-2024-27780
was published
Feb 11, 2025
Windows NTFS Elevation of Privilege Vulnerability
Low
Unreviewed
CVE-2025-21337
was published
Feb 11, 2025
In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on...
Low
Unreviewed
CVE-2025-0526
was published
Feb 11, 2025
In affected versions of Octopus Server error messages were handled unsafely on the error page. If...
Low
Unreviewed
CVE-2025-0513
was published
Feb 11, 2025
In affected versions of Octopus Server the preview import feature could be leveraged to identify...
Low
Unreviewed
CVE-2025-0525
was published
Feb 11, 2025
A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...
Low
Unreviewed
CVE-2023-44322
was published
Nov 14, 2023
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...
Low
Unreviewed
CVE-2024-50560
was published
Nov 12, 2024
A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this...
Low
Unreviewed
CVE-2025-1179
was published
Feb 11, 2025
A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects...
Low
Unreviewed
CVE-2025-1181
was published
Feb 11, 2025
ProTip!
Advisories are also available from the
GraphQL API