GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,350
Erlang
31
GitHub Actions
22
Go
2,119
Maven
5,000+
npm
3,770
NuGet
680
pip
3,459
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,453 advisories
Filter by severity
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Moderate
CVE-2025-24860
was published
for
org.apache.cassandra:cassandra-all
(Maven)
Feb 4, 2025
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users...
High
Unreviewed
CVE-2024-57434
was published
Feb 1, 2025
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function....
High
Unreviewed
CVE-2024-57433
was published
Feb 1, 2025
macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys...
Critical
Unreviewed
CVE-2024-57432
was published
Jan 31, 2025
SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on...
Critical
Unreviewed
CVE-2024-47857
was published
Jan 31, 2025
Software installed and run as a non-privileged user may conduct improper read/write operations on...
High
Unreviewed
CVE-2024-46974
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23921
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to disclose sensitive information on...
Moderate
Unreviewed
CVE-2024-23937
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded...
High
Unreviewed
CVE-2024-23928
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23963
was published
Jan 31, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS...
Moderate
Unreviewed
CVE-2025-24099
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
High
Unreviewed
CVE-2025-0745
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0743
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI
2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0741
was published
Jan 30, 2025
an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
High
Unreviewed
CVE-2025-0744
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0742
was published
Jan 30, 2025
RuoYi has insecure permissions
Moderate
CVE-2024-57438
was published
for
com.ruoyi:ruoyi
(Maven)
Jan 29, 2025
Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the...
High
Unreviewed
CVE-2024-41140
was published
Jan 29, 2025
A Local Code Execution Vulnerability exists in the product and version listed above. The...
High
Unreviewed
CVE-2025-24479
was published
Jan 28, 2025
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path...
High
Unreviewed
CVE-2025-0781
was published
Jan 28, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3,...
Low
Unreviewed
CVE-2025-24121
was published
Jan 28, 2025
An authentication issue was addressed with improved state management. This issue is fixed in iOS...
Low
Unreviewed
CVE-2025-24141
was published
Jan 28, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24114
was published
Jan 28, 2025
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma...
High
Unreviewed
CVE-2024-54537
was published
Jan 28, 2025
This issue was addressed with improved redaction of sensitive information. This issue is fixed in...
Moderate
Unreviewed
CVE-2024-54550
was published
Jan 28, 2025
ProTip!
Advisories are also available from the
GraphQL API