Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

88 advisories

Loading
Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were... High Unreviewed
CVE-2022-36331 was published Jun 12, 2023
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token High
CVE-2017-16897 was published for passport-wsfed-saml2 (npm) Jun 21, 2023
A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate... High Unreviewed
CVE-2022-32747 was published Jul 6, 2023
AMI SPx contains a vulnerability in BMC where a User may cause an authentication bypass by... High Unreviewed
CVE-2023-34329 was published Jul 18, 2023
This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from... High Unreviewed
CVE-2023-4279 was published Sep 4, 2023
This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from... High Unreviewed
CVE-2023-5133 was published Oct 16, 2023
Authentication bypass vulnerability, the exploitation of which could allow a local attacker to... High Unreviewed
CVE-2023-3103 was published Nov 22, 2023
An issue was discovered in Network Optix NxCloud before 23.1.0.40440. It was possible to add a... High Unreviewed
CVE-2023-6263 was published Nov 22, 2023
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful... High Unreviewed
CVE-2023-44117 was published Jan 16, 2024
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful... High Unreviewed
CVE-2023-4566 was published Jan 16, 2024
An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones... High Unreviewed
CVE-2024-22520 was published Feb 7, 2024
An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via... High Unreviewed
CVE-2024-22519 was published Feb 7, 2024
When opening a website using the `firefox://` protocol handler, SameSite cookies were not... High Unreviewed
CVE-2024-1555 was published Feb 20, 2024
An inconsistent user interface issue was addressed with improved state management. This issue is... High Unreviewed
CVE-2023-42843 was published Feb 21, 2024
SMTP smuggling in Apache James High
CVE-2023-51747 was published for org.apache.james:james-server (Maven) Feb 27, 2024
oscerd
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS... High Unreviewed
CVE-2024-22457 was published Mar 1, 2024
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification... High Unreviewed
CVE-2024-22092 was published Apr 2, 2024
Ollama DNS rebinding vulnerability High
CVE-2024-28224 was published for github.com/ollama/ollama (Go) Apr 8, 2024
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748... High Unreviewed
CVE-2024-30191 was published Apr 9, 2024
Apache HugeGraph-Server: Bypass whitelist in Auth mode High
CVE-2024-27349 was published for org.apache.hugegraph:hugegraph-api (Maven) Apr 22, 2024
cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by... High Unreviewed
CVE-2024-33531 was published Apr 24, 2024
Jenkins Script Security Plugin sandbox bypass vulnerability High
CVE-2024-34145 was published for org.jenkins-ci.plugins:script-security (Maven) May 2, 2024
OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled High
CVE-2024-32977 was published for OctoPrint (pip) May 14, 2024
jacopotediosi
Grafana Escalation from admin to server admin when auth proxy is used High
CVE-2022-35957 was published for github.com/grafana/grafana (Go) May 14, 2024
A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can... High Unreviewed
CVE-2024-5037 was published Jun 5, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database