Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,731
Erlang
35
GitHub Actions
29
Go
2,308
Maven
5,000+
npm
3,949
NuGet
711
pip
3,727
Pub
12
RubyGems
920
Rust
964
Swift
38
Unreviewed advisories
All unreviewed
5,000+

108 advisories

Loading
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... High Unreviewed
CVE-2023-42918 was published Jul 29, 2024
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote... High Unreviewed
CVE-2024-27713 was published Jul 5, 2024
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability High Unreviewed
CVE-2024-38070 was published Jul 9, 2024
Azure CycleCloud Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-38092 was published Jul 9, 2024
Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies High
CVE-2024-34144 was published for org.jenkins-ci.plugins:script-security (Maven) May 2, 2024
Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This... High Unreviewed
CVE-2024-6153 was published Jun 20, 2024
Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows... High Unreviewed
CVE-2024-5924 was published Jun 13, 2024
Internet Shortcut Files Security Feature Bypass Vulnerability High Unreviewed
CVE-2024-21412 was published Feb 13, 2024
Microsoft Office Remote Code Execution Vulnerability High Unreviewed
CVE-2024-20673 was published Feb 13, 2024
Secure Boot Security Feature Bypass Vulnerability High Unreviewed
CVE-2024-28920 was published Apr 9, 2024
SmartScreen Prompt Security Feature Bypass Vulnerability High Unreviewed
CVE-2024-29988 was published Apr 9, 2024
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4... High Unreviewed
CVE-2023-34984 was published Sep 13, 2023
Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version... High Unreviewed
CVE-2023-30722 was published Sep 6, 2023
Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM... High Unreviewed
CVE-2023-34427 was published Aug 11, 2023
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered... High Unreviewed
CVE-2023-3089 was published Jul 5, 2023
Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an... High Unreviewed
CVE-2022-41979 was published May 10, 2023
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol... High Unreviewed
CVE-2019-1970 was published May 24, 2022
A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could... High Unreviewed
CVE-2019-1832 was published May 24, 2022
Intermittent HTTP policy bypass High
CVE-2024-28248 was published for github.com/cilium/cilium (Go) Mar 18, 2024
sayboras
Denial of Service in http-proxy High
GHSA-6x33-pw7p-hmpq was published for http-proxy (npm) Sep 4, 2020
chalbersma
Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin High
CVE-2022-43434 was published for io.jenkins.plugins:neuvector-vulnerability-scanner (Maven) Oct 19, 2022
NotMyFault
Jenkins Katalon Plugin vulnerable to Protection Mechanism Failure High
CVE-2022-43416 was published for org.jenkins-ci.plugins:katalon (Maven) Oct 19, 2022
Unauthorized view fragment access in Jenkins High
CVE-2022-34175 was published for org.jenkins-ci.main:jenkins-core (Maven) Jun 24, 2022
NotMyFault
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure High
CVE-2022-25183 was published for org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (Maven) Feb 16, 2022
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure High
CVE-2022-25182 was published for org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (Maven) Feb 16, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database