Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
893
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

103,281 advisories

Loading
A prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a... High Unreviewed
CVE-2024-57076 was published Feb 6, 2025
@zag-js/core prototype pollution High
CVE-2024-57079 was published for @zag-js/core (npm) Feb 6, 2025
A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers... High Unreviewed
CVE-2024-57081 was published Feb 6, 2025
@rpldy/uploader prototype pollution High
CVE-2024-57082 was published for @rpldy/uploader (npm) Feb 6, 2025
vxe-table prototype pollution High
CVE-2024-57080 was published for vxe-table (npm) Feb 6, 2025
A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers... High Unreviewed
CVE-2024-57085 was published Feb 6, 2025
A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows... High Unreviewed
CVE-2024-57086 was published Feb 6, 2025
Netplex Json-smart Uncontrolled Recursion vulnerability High
CVE-2024-57699 was published for net.minidev:json-smart (Maven) Feb 6, 2025
eazy-logger prototype pollution High
CVE-2024-57075 was published for eazy-logger (npm) Feb 6, 2025
RDIL
A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to... High Unreviewed
CVE-2024-57084 was published Feb 6, 2025
A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the... High Unreviewed
CVE-2024-48394 was published Feb 6, 2025
@ndhoule/defaults prototype pollution High
CVE-2024-57066 was published for @ndhoule/defaults (npm) Feb 6, 2025
A prototype pollution in the lib.createPath function of utile v0.3.0 allows attackers to cause a... High Unreviewed
CVE-2024-57065 was published Feb 6, 2025
A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a... High Unreviewed
CVE-2024-57069 was published Feb 6, 2025
A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows... High Unreviewed
CVE-2024-57064 was published Feb 6, 2025
A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause... High Unreviewed
CVE-2024-57063 was published Feb 6, 2025
@tanstack/form-core prototype pollution High
CVE-2024-57068 was published for @tanstack/form-core (npm) Feb 6, 2025
module-from-string prototype pollution High
CVE-2024-57072 was published for module-from-string (npm) Feb 6, 2025
A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a... High Unreviewed
CVE-2024-57067 was published Feb 6, 2025
A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause... High Unreviewed
CVE-2024-57071 was published Feb 6, 2025
Contrast's unauthenticated recovery allows Coordinator impersonation High
GHSA-vqv5-385r-2hf8 was published for github.com/edgelesssys/contrast (Go) Feb 5, 2025
3u13r burgerdev
katexochen
MobSF Local Privilege Escalation High
CVE-2025-24805 was published for mobsf (pip) Feb 5, 2025
MobSF Partial Denial of Service (DoS) High
CVE-2025-24804 was published for mobsf (pip) Feb 5, 2025
MobSF Stored Cross-Site Scripting (XSS) High
CVE-2025-24803 was published for mobsf (pip) Feb 5, 2025
When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP... High Unreviewed
CVE-2025-20045 was published Feb 5, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database