GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,356
Erlang
33
GitHub Actions
22
Go
2,121
Maven
5,000+
npm
3,783
NuGet
683
pip
3,465
Pub
12
RubyGems
893
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
1,148 advisories
Filter by severity
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24420
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24421
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24419
was published
Feb 11, 2025
The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain...
Moderate
Unreviewed
CVE-2025-24872
was published
Feb 11, 2025
SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose...
Moderate
Unreviewed
CVE-2025-24869
was published
Feb 11, 2025
An error when handling authorization related to the import / export interfaces on the RISC...
Moderate
Unreviewed
CVE-2021-41528
was published
Feb 7, 2025
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Moderate
CVE-2025-24860
was published
for
org.apache.cassandra:cassandra-all
(Maven)
Feb 4, 2025
This vulnerability allows network-adjacent attackers to disclose sensitive information on...
Moderate
Unreviewed
CVE-2024-23937
was published
Jan 31, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS...
Moderate
Unreviewed
CVE-2025-24099
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0743
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0742
was published
Jan 30, 2025
An Improper Access Control vulnerability has been found in EmbedAI
2.1 and below. This...
Moderate
Unreviewed
CVE-2025-0741
was published
Jan 30, 2025
RuoYi has insecure permissions
Moderate
CVE-2024-57438
was published
for
com.ruoyi:ruoyi
(Maven)
Jan 29, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24114
was published
Jan 28, 2025
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
Moderate
Unreviewed
CVE-2024-54488
was published
Jan 28, 2025
This issue was addressed with improved redaction of sensitive information. This issue is fixed in...
Moderate
Unreviewed
CVE-2024-54550
was published
Jan 28, 2025
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that...
Moderate
Unreviewed
CVE-2023-50946
was published
Jan 26, 2025
Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
Moderate
CVE-2025-24401
was published
for
io.jenkins.plugins:folder-auth
(Maven)
Jan 22, 2025
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Moderate
CVE-2025-24397
was published
for
org.jenkins-ci.plugins:gitlab-plugin
(Maven)
Jan 22, 2025
In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security...
Moderate
Unreviewed
CVE-2024-42013
was published
Jan 22, 2025
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft ...
Moderate
Unreviewed
CVE-2025-21539
was published
Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Moderate
Unreviewed
CVE-2025-21540
was published
Jan 21, 2025
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle...
Moderate
Unreviewed
CVE-2025-21563
was published
Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Moderate
Unreviewed
CVE-2025-21567
was published
Jan 21, 2025
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...
Moderate
Unreviewed
CVE-2025-21568
was published
Jan 21, 2025
ProTip!
Advisories are also available from the
GraphQL API