Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,950
Erlang
39
GitHub Actions
38
Go
2,603
Maven
5,000+
npm
4,250
NuGet
755
pip
4,013
Pub
12
RubyGems
953
Rust
1,048
Swift
45
Unreviewed advisories
All unreviewed
5,000+

235 advisories

Loading
InvokeAI Arbitrary File Deletion vulnerability Critical
CVE-2024-11042 was published for InvokeAI (pip) Mar 20, 2025
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that... Critical Unreviewed
CVE-2024-10834 was published Mar 20, 2025
DB-GPT vulnerable to Arbitrary File Upload with Path Traversal Critical
CVE-2024-10902 was published for dbgpt (pip) Mar 20, 2025
An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2,... High Unreviewed
CVE-2024-10361 was published Mar 20, 2025
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3... High Unreviewed
CVE-2023-45588 was published Mar 14, 2025
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform... Moderate Unreviewed
CVE-2025-24996 was published Mar 11, 2025
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform... Moderate Unreviewed
CVE-2025-24054 was published Mar 11, 2025
Mockoon has a Path Traversal and LFI in the static file serving endpoint High
CVE-2025-59049 was published for @mockoon/cli (npm) Mar 11, 2025
RisingZero
Credited to RisingZero
The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to,... High Unreviewed
CVE-2024-12036 was published Mar 7, 2025
There is a local file inclusion vulnerability in ArcGIS Server 10.9.1 thru 11.3 that may allow a... High Unreviewed
CVE-2024-51961 was published Mar 3, 2025
The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all... Moderate Unreviewed
CVE-2025-1730 was published Mar 1, 2025
The account file upload functionality in Syspass 3.2.x fails to properly handle special... Moderate Unreviewed
CVE-2025-25478 was published Mar 1, 2025
Pebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro High
CVE-2025-1686 was published for io.pebbletemplates:pebble (Maven) Feb 28, 2025
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the... High Unreviewed
CVE-2025-25761 was published Feb 27, 2025
IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4... Moderate Unreviewed
CVE-2024-22341 was published Feb 22, 2025
External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti... Critical Unreviewed
CVE-2024-38657 was published Feb 21, 2025
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... Moderate Unreviewed
CVE-2024-47265 was published Feb 13, 2025
An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web... Moderate Unreviewed
CVE-2025-0109 was published Feb 12, 2025
An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an... High Unreviewed
CVE-2025-0111 was published Feb 12, 2025
NTLM Hash Disclosure Spoofing Vulnerability Moderate Unreviewed
CVE-2025-21377 was published Feb 11, 2025
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti... Moderate Unreviewed
CVE-2024-12058 was published Feb 11, 2025
Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local... Moderate Unreviewed
CVE-2025-0630 was published Feb 4, 2025
The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-12267 was published Jan 31, 2025
The W2S – Migrate WooCommerce to Shopify plugin for WordPress is vulnerable to Arbitrary File... Moderate Unreviewed
CVE-2024-12861 was published Jan 30, 2025
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an... Moderate Unreviewed
CVE-2025-0105 was published Jan 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database