Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,716
Erlang
35
GitHub Actions
29
Go
2,304
Maven
5,000+
npm
3,946
NuGet
711
pip
3,719
Pub
12
RubyGems
920
Rust
964
Swift
38
Unreviewed advisories
All unreviewed
5,000+

3,779 advisories

Loading
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device... Critical Unreviewed
CVE-2025-30114 was published Mar 18, 2025
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of... High Unreviewed
CVE-2025-30116 was published Mar 18, 2025
A vulnerability was found in Keytop 路内停车收费系统 2.7.1. It has been declared as critical. Affected by... Moderate Unreviewed
CVE-2025-2388 was published Mar 17, 2025
A vulnerability, which was classified as critical, has been found in IROAD Dash Cam X5 and Dash... Moderate Unreviewed
CVE-2025-2344 was published Mar 16, 2025
A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This... Moderate Unreviewed
CVE-2025-2339 was published Mar 16, 2025
A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay... High Unreviewed
CVE-2025-2230 was published Mar 13, 2025
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass... High Unreviewed
CVE-2025-0813 was published Mar 12, 2025
Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover Moderate
CVE-2025-29773 was published for froxlor/froxlor (Composer) Mar 11, 2025
halas98
Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries High
CVE-2025-27403 was published for github.com/deislabs/ratify (Go) Mar 11, 2025
A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning... Critical Unreviewed
CVE-2024-56336 was published Mar 11, 2025
Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak Moderate
CVE-2025-0604 was published for org.keycloak:keycloak-ldap-federation (Maven) Mar 10, 2025
Improper Authentication vulnerability in GE Vernova EnerVista UR Setup allows Authentication... High Unreviewed
CVE-2025-27254 was published Mar 10, 2025
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin... High Unreviewed
CVE-2024-11087 was published Mar 8, 2025
The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up... Critical Unreviewed
CVE-2025-1475 was published Mar 7, 2025
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to... Moderate Unreviewed
CVE-2025-25450 was published Mar 6, 2025
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to... Moderate Unreviewed
CVE-2025-25452 was published Mar 6, 2025
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate... Moderate Unreviewed
CVE-2025-25451 was published Mar 6, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923... Critical Unreviewed
CVE-2025-27672 was published Mar 5, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368... Critical Unreviewed
CVE-2025-27641 was published Mar 5, 2025
Scanning certain QR codes that included text with a website URL could allow the URL to be opened... Moderate Unreviewed
CVE-2025-27425 was published Mar 4, 2025
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as... Low Unreviewed
CVE-2025-1880 was published Mar 3, 2025
MinIO allows an SFTP authentication bypass due to improperly trusted SSH key Moderate
CVE-2025-27414 was published for github.com/minio/minio (Go) Mar 3, 2025
donatello ston1th
While processing the authentication message in UE, improper authentication may lead to... Moderate Unreviewed
CVE-2024-38426 was published Mar 3, 2025
Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account... High Unreviewed
CVE-2025-1723 was published Mar 3, 2025
An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge... Critical Unreviewed
CVE-2025-23116 was published Mar 1, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database