GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,950
Erlang
39
GitHub Actions
38
Go
2,603
Maven
5,000+
npm
4,250
NuGet
755
pip
4,013
Pub
12
RubyGems
953
Rust
1,048
Swift
45
Unreviewed advisories
All unreviewed
5,000+
397 advisories
Filter by severity
An improper access control vulnerability exists in multiple WSO2 products due to insufficient...
Critical
Unreviewed
CVE-2025-9804
was published
Oct 16, 2025
code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege...
Critical
Unreviewed
CVE-2025-60306
was published
Oct 10, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2025-59218
was published
Oct 9, 2025
In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability...
Critical
Unreviewed
CVE-2025-36636
was published
Oct 8, 2025
The BATBToken smart contract (address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler...
Critical
Unreviewed
CVE-2025-57247
was published
Oct 6, 2025
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component:...
Critical
Unreviewed
CVE-2025-61882
was published
Oct 5, 2025
An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru...
Critical
Unreviewed
CVE-2025-57266
was published
Sep 29, 2025
A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS)...
Critical
Unreviewed
CVE-2025-54391
was published
Sep 16, 2025
Azure Networking Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2025-54914
was published
Sep 5, 2025
Azure Bot Service Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2025-55244
was published
Sep 5, 2025
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4...
Critical
Unreviewed
CVE-2025-25734
was published
Aug 26, 2025
An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com...
Critical
Unreviewed
CVE-2025-50900
was published
Aug 26, 2025
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6...
Critical
Unreviewed
CVE-2025-29514
was published
Aug 25, 2025
Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C...
Critical
Unreviewed
CVE-2025-29515
was published
Aug 25, 2025
Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a...
Critical
Unreviewed
CVE-2022-43110
was published
Aug 22, 2025
Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to...
Critical
Unreviewed
CVE-2024-53496
was published
Aug 22, 2025
Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges...
Critical
Unreviewed
CVE-2025-53763
was published
Aug 21, 2025
An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8...
Critical
Unreviewed
CVE-2024-45438
was published
Aug 21, 2025
Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access...
Critical
Unreviewed
CVE-2024-57155
was published
Aug 20, 2025
Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication...
Critical
Unreviewed
CVE-2024-57154
was published
Aug 20, 2025
Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access...
Critical
Unreviewed
CVE-2024-57157
was published
Aug 20, 2025
Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the...
Critical
Unreviewed
CVE-2025-50870
was published
Aug 1, 2025
An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated...
Critical
Unreviewed
CVE-2025-26062
was published
Jul 31, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-43232
was published
Jul 30, 2025
This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia...
Critical
Unreviewed
CVE-2025-43233
was published
Jul 30, 2025
ProTip!
Advisories are also available from the
GraphQL API