GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,356
Erlang
33
GitHub Actions
22
Go
2,121
Maven
5,000+
npm
3,783
NuGet
683
pip
3,465
Pub
12
RubyGems
893
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
948 advisories
Filter by severity
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24420
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24421
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24419
was published
Feb 11, 2025
The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain...
Moderate
Unreviewed
CVE-2025-24872
was published
Feb 11, 2025
SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose...
Moderate
Unreviewed
CVE-2025-24869
was published
Feb 11, 2025
An error when handling authorization related to the import / export interfaces on the RISC...
Moderate
Unreviewed
CVE-2021-41528
was published
Feb 7, 2025
This vulnerability allows network-adjacent attackers to disclose sensitive information on...
Moderate
Unreviewed
CVE-2024-23937
was published
Jan 31, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS...
Moderate
Unreviewed
CVE-2025-24099
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0743
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0742
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI
2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0741
was published
Jan 30, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24114
was published
Jan 28, 2025
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
Moderate
Unreviewed
CVE-2024-54488
was published
Jan 28, 2025
This issue was addressed with improved redaction of sensitive information. This issue is fixed in...
Moderate
Unreviewed
CVE-2024-54550
was published
Jan 28, 2025
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that...
Moderate
Unreviewed
CVE-2023-50946
was published
Jan 26, 2025
In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security...
Moderate
Unreviewed
CVE-2024-42013
was published
Jan 22, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Moderate
Unreviewed
CVE-2025-21540
was published
Jan 21, 2025
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle...
Moderate
Unreviewed
CVE-2025-21563
was published
Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Moderate
Unreviewed
CVE-2025-21567
was published
Jan 21, 2025
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...
Moderate
Unreviewed
CVE-2025-21568
was published
Jan 21, 2025
Vulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences...
Moderate
Unreviewed
CVE-2025-21570
was published
Jan 21, 2025
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...
Moderate
Unreviewed
CVE-2025-21569
was published
Jan 21, 2025
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are...
Moderate
Unreviewed
CVE-2025-21553
was published
Jan 21, 2025
Vulnerability in the Oracle Communications Order and Service Management product of Oracle...
Moderate
Unreviewed
CVE-2025-21554
was published
Jan 21, 2025
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle...
Moderate
Unreviewed
CVE-2025-21558
was published
Jan 21, 2025
ProTip!
Advisories are also available from the
GraphQL API