Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,950
Erlang
39
GitHub Actions
38
Go
2,603
Maven
5,000+
npm
4,250
NuGet
755
pip
4,013
Pub
12
RubyGems
953
Rust
1,048
Swift
45
Unreviewed advisories
All unreviewed
5,000+

895 advisories

Loading
The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted... High Unreviewed
CVE-2025-46183 was published Oct 24, 2025
Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product... High Unreviewed
CVE-2025-62008 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and... High Unreviewed
CVE-2025-60209 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection... High Unreviewed
CVE-2025-60212 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property... High Unreviewed
CVE-2025-60234 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in themesflat TF Woo Product Grid Addon For... High Unreviewed
CVE-2025-59007 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator... High Unreviewed
CVE-2025-52737 was published Oct 22, 2025
Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows... High Unreviewed
CVE-2025-52740 was published Oct 22, 2025
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate... High Unreviewed
CVE-2025-59285 was published Oct 14, 2025
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to... High Unreviewed
CVE-2025-59237 was published Oct 14, 2025
Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to... High Unreviewed
CVE-2025-11622 was published Oct 13, 2025
Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support allows Object... High Unreviewed
CVE-2025-58662 was published Sep 22, 2025
Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector allows Object... High Unreviewed
CVE-2025-53465 was published Sep 22, 2025
Deserialization of Untrusted Data vulnerability in ConveyThis Language Translate Widget for... High Unreviewed
CVE-2025-57919 was published Sep 22, 2025
Keras is vulnerable to Deserialization of Untrusted Data High
CVE-2025-9906 was published for keras (pip) Sep 19, 2025
cai0duque
Credited to cai0duque
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling... High Unreviewed
CVE-2025-10492 was published Sep 16, 2025
Monai: Unsafe use of Pickle deserialization may lead to RCE High
CVE-2025-58757 was published for monai (pip) Sep 9, 2025
h3rrr
Credited to h3rrr
MONAI: Unsafe torch usage may lead to arbitrary code execution High
CVE-2025-58756 was published for monai (pip) Sep 9, 2025
h3rrr
Credited to h3rrr
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to... High Unreviewed
CVE-2025-54897 was published Sep 9, 2025
Deserialization of Untrusted Data vulnerability in webdevstudios Constant Contact for WordPress... High Unreviewed
CVE-2025-48101 was published Sep 9, 2025
Deserialization of Untrusted Data vulnerability in ThemeMove ThemeMove Core allows Object... High Unreviewed
CVE-2025-53303 was published Sep 9, 2025
An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a... High Unreviewed
CVE-2025-41701 was published Sep 9, 2025
In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle... High Unreviewed
CVE-2025-32312 was published Sep 5, 2025
Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu... High Unreviewed
CVE-2025-58839 was published Sep 5, 2025
Deserialization of Untrusted Data vulnerability in Rubel Miah Aitasi Coming Soon allows Object... High Unreviewed
CVE-2025-58815 was published Sep 5, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database