Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,633
Erlang
34
GitHub Actions
25
Go
2,241
Maven
5,000+
npm
3,902
NuGet
701
pip
3,669
Pub
12
RubyGems
914
Rust
943
Swift
38
Unreviewed advisories
All unreviewed
5,000+

135 advisories

Loading
Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR Critical
CVE-2025-32445 was published for github.com/argoproj/argo-events (Go) Apr 14, 2025
thevilledev
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™... High Unreviewed
CVE-2025-0120 was published Apr 11, 2025
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64... High Unreviewed
CVE-2025-23008 was published Apr 10, 2025
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit)... Moderate Unreviewed
CVE-2025-23009 was published Apr 10, 2025
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers... Critical Unreviewed
CVE-2025-3364 was published Apr 8, 2025
A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability... Moderate Unreviewed
CVE-2024-11821 was published Mar 20, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an... High Unreviewed
CVE-2024-48013 was published Mar 17, 2025
Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability... High Unreviewed
CVE-2024-2240 was published Feb 14, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0... Moderate Unreviewed
CVE-2024-8266 was published Feb 13, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0... Critical Unreviewed
CVE-2024-7102 was published Feb 13, 2025
An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo... High Unreviewed
CVE-2024-12673 was published Feb 12, 2025
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to... High Unreviewed
CVE-2024-21924 was published Feb 11, 2025
Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x... Moderate Unreviewed
CVE-2025-22890 was published Feb 6, 2025
IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated... High Unreviewed
CVE-2024-49814 was published Feb 6, 2025
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS... Low Unreviewed
CVE-2025-20185 was published Feb 5, 2025
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes... Moderate Unreviewed
CVE-2023-37412 was published Jan 29, 2025
Apache Solr vulnerable to Execution with Unnecessary Privileges High
CVE-2025-24814 was published for org.apache.solr:solr-core (Maven) Jan 27, 2025
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges... High Unreviewed
CVE-2024-47978 was published Dec 25, 2024
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate... High Unreviewed
CVE-2024-35141 was published Dec 19, 2024
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local... High Unreviewed
CVE-2024-31891 was published Dec 14, 2024
The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a... Moderate Unreviewed
CVE-2024-28140 was published Dec 11, 2024
The www-data user can elevate its privileges because sudo is configured to allow the execution of... High Unreviewed
CVE-2024-28139 was published Dec 11, 2024
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated... High Unreviewed
CVE-2024-49804 was published Nov 29, 2024
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™... Moderate Unreviewed
CVE-2021-38118 was published Nov 22, 2024
A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the... High Unreviewed
CVE-2024-11075 was published Nov 19, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database