GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,670
Maven
5,000+
npm
4,296
NuGet
760
pip
4,075
Pub
12
RubyGems
957
Rust
1,058
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
27 advisories
Filter by severity
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly...
Moderate
Unreviewed
CVE-2025-63563
was published
Oct 31, 2025
A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env...
High
Unreviewed
CVE-2025-7972
was published
Aug 14, 2025
A vulnerability in ABB Aspect.This issue affects Aspect: before <3.08.04-s01.
High
Unreviewed
CVE-2025-53190
was published
Aug 11, 2025
An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a...
Critical
Unreviewed
CVE-2024-48853
was published
May 22, 2025
An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version...
Moderate
Unreviewed
CVE-2024-46671
was published
Apr 8, 2025
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could...
High
Unreviewed
CVE-2024-58105
was published
Mar 25, 2025
Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an...
Moderate
Unreviewed
CVE-2024-45425
was published
Feb 25, 2025
An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6,...
Moderate
Unreviewed
CVE-2024-6356
was published
Feb 5, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5...
Moderate
Unreviewed
CVE-2024-13041
was published
Jan 9, 2025
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to...
Moderate
Unreviewed
CVE-2024-52359
was published
Nov 19, 2024
An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user...
Critical
Unreviewed
CVE-2023-26689
was published
Sep 25, 2024
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy...
High
Unreviewed
CVE-2024-7265
was published
Aug 7, 2024
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy...
High
Unreviewed
CVE-2024-7266
was published
Aug 7, 2024
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server...
High
Unreviewed
CVE-2024-28020
was published
Jun 11, 2024
IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would...
Moderate
Unreviewed
CVE-2024-27269
was published
May 14, 2024
Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker...
High
Unreviewed
CVE-2022-35503
was published
Apr 22, 2024
A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user...
Moderate
Unreviewed
CVE-2024-29296
was published
Apr 10, 2024
ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads...
Moderate
Unreviewed
CVE-2023-51750
was published
Jan 11, 2024
A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4...
Moderate
Unreviewed
CVE-2023-3907
was published
Dec 18, 2023
A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5,...
Moderate
Unreviewed
CVE-2023-3914
was published
Sep 29, 2023
An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11...
Moderate
Unreviewed
CVE-2023-3115
was published
Sep 29, 2023
A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage...
Moderate
Unreviewed
CVE-2023-20253
was published
Sep 27, 2023
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability...
High
Unreviewed
CVE-2023-25519
was published
Sep 14, 2023
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0...
Moderate
Unreviewed
CVE-2023-3932
was published
Aug 3, 2023
Unintentional change of settings during initial registration of system administrators which uses...
High
Unreviewed
CVE-2023-0857
was published
May 11, 2023
ProTip!
Advisories are also available from the
GraphQL API