GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,840
Erlang
36
GitHub Actions
33
Go
2,464
Maven
5,000+
npm
4,082
NuGet
723
pip
3,880
Pub
12
RubyGems
943
Rust
1,011
Swift
39
Unreviewed advisories
All unreviewed
5,000+
291 advisories
Filter by severity
An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are...
Moderate
Unreviewed
CVE-2025-46660
was published
Aug 6, 2025
A vulnerability was discovered in the storage policy for certain sets of sensitive credential...
Moderate
Unreviewed
CVE-2025-37110
was published
Jul 31, 2025
An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain...
Moderate
Unreviewed
CVE-2025-28171
was published
Jul 29, 2025
Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows...
High
Unreviewed
CVE-2025-28244
was published
Jul 10, 2025
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows...
Moderate
Unreviewed
CVE-2025-21003
was published
Jul 8, 2025
The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms...
Moderate
Unreviewed
CVE-2025-42979
was published
Jul 8, 2025
The TeleMessage service through 2025-05-05 implements authentication through a long-lived...
Moderate
Unreviewed
CVE-2025-48929
was published
May 28, 2025
Serialized configuration information may be disclosed during device commissioning while using...
Moderate
Unreviewed
CVE-2024-13954
was published
May 22, 2025
Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the...
High
Unreviewed
CVE-2025-45242
was published
May 5, 2025
Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to...
High
Unreviewed
CVE-2025-46627
was published
May 2, 2025
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially...
Moderate
Unreviewed
CVE-2025-2440
was published
Apr 9, 2025
Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to...
High
Unreviewed
CVE-2025-29809
was published
Apr 8, 2025
Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this...
Moderate
Unreviewed
CVE-2025-2489
was published
Mar 18, 2025
Openshift Hive Exposes VCenter Credentials via ClusterProvision
High
CVE-2025-2241
was published
for
github.com/openshift/hive
(Go)
Mar 17, 2025
A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS...
Low
Unreviewed
CVE-2025-2157
was published
Mar 15, 2025
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through...
Moderate
Unreviewed
CVE-2025-21098
was published
Mar 4, 2025
The connection string visible to users with access to FRSCore database on Foreseer Reporting...
Moderate
Unreviewed
CVE-2025-22492
was published
Feb 28, 2025
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-12315
was published
Feb 12, 2025
Inclusion of sensitive information in test code in softsim TA prior to SMR Jan-2025 Release 1...
Moderate
Unreviewed
CVE-2025-20886
was published
Feb 4, 2025
RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
High
CVE-2024-57436
was published
for
com.ruoyi:ruoyi
(Maven)
Jan 29, 2025
An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a...
High
Unreviewed
CVE-2024-57546
was published
Jan 28, 2025
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS...
Moderate
Unreviewed
CVE-2025-24149
was published
Jan 28, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Ventura...
Moderate
Unreviewed
CVE-2025-24138
was published
Jan 28, 2025
An information disclosure issue was addressed with improved privacy controls. This issue is fixed...
Moderate
Unreviewed
CVE-2025-24134
was published
Jan 28, 2025
This issue was addressed with improved redaction of sensitive information. This issue is fixed in...
Moderate
Unreviewed
CVE-2025-24117
was published
Jan 28, 2025
ProTip!
Advisories are also available from the
GraphQL API