Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,827
Erlang
36
GitHub Actions
32
Go
2,441
Maven
5,000+
npm
4,061
NuGet
723
pip
3,859
Pub
12
RubyGems
941
Rust
1,007
Swift
38
Unreviewed advisories
All unreviewed
5,000+

110 advisories

Loading
Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX... High Unreviewed
CVE-2025-48261 was published Jun 9, 2025
XWiki makes title of inaccessible pages available through the class property values REST API High
CVE-2025-49584 was published for org.xwiki.platform:xwiki-platform-rest-server (Maven) Jun 13, 2025
Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe... Moderate Unreviewed
CVE-2025-53309 was published Jun 27, 2025
Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Authorize... Moderate Unreviewed
CVE-2025-53322 was published Jun 27, 2025
Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables Moderate
CVE-2025-48934 was published for deno (Rust) Jun 4, 2025
frankvd
In ConnectWise PSA versions older than 2025.9, a vulnerability exists where authenticated users... Moderate Unreviewed
CVE-2025-7204 was published Jul 9, 2025
Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data Low
CVE-2024-50378 was published for apache-airflow (pip) Nov 8, 2024
Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel Moderate
CVE-2024-25150 was published for com.liferay.portal:release.dxp.bom (Maven) Feb 20, 2024
YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include... High Unreviewed
CVE-2025-8862 was published Aug 11, 2025
Insertion of Sensitive Information Into Sent Data vulnerability in Liquid Web GiveWP allows... High Unreviewed
CVE-2025-47444 was published Aug 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database