Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,670
Maven
5,000+
npm
4,296
NuGet
760
pip
4,075
Pub
12
RubyGems
957
Rust
1,058
Swift
45
Unreviewed advisories
All unreviewed
5,000+

35 advisories

Loading
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by... Moderate Unreviewed
CVE-2022-43847 was published Apr 14, 2025
IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper... Moderate Unreviewed
CVE-2025-2950 was published Apr 21, 2025
A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to... Moderate Unreviewed
CVE-2025-24339 was published Apr 30, 2025
HTTP host header injection vulnerability in Icewarp Mail Server affecting version 11.4.0. By... Low Unreviewed
CVE-2025-40631 was published May 16, 2025
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2... Moderate Unreviewed
CVE-2024-40686 was published Jul 23, 2025
The BigFix WebUI application responds with HOST information from the HTTP header field making it... Moderate Unreviewed
CVE-2025-52647 was published Oct 11, 2025
IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation... Moderate Unreviewed
CVE-2025-36223 was published Nov 12, 2025
OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation High
CVE-2025-64484 was published for github.com/oauth2-proxy/oauth2-proxy/v7 (Go) Nov 12, 2025
47Cid
Credited to 47Cid
Backdrop CMS Host Header Injection vulnerability Moderate
CVE-2025-63828 was published for backdrop/backdrop (Composer) Nov 18, 2025
A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown... Moderate Unreviewed
CVE-2025-13434 was published Nov 20, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database