Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,670
Maven
5,000+
npm
4,296
NuGet
760
pip
4,075
Pub
12
RubyGems
957
Rust
1,058
Swift
45
Unreviewed advisories
All unreviewed
5,000+

114,496 advisories

Loading
A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50.... High Unreviewed
CVE-2025-13550 was published Nov 23, 2025
A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The... High Unreviewed
CVE-2025-13551 was published Nov 23, 2025
A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of... High Unreviewed
CVE-2025-13553 was published Nov 23, 2025
A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50.... High Unreviewed
CVE-2025-13552 was published Nov 23, 2025
A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an... High Unreviewed
CVE-2025-13547 was published Nov 23, 2025
A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of... High Unreviewed
CVE-2025-13549 was published Nov 23, 2025
A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This... High Unreviewed
CVE-2025-13548 was published Nov 23, 2025
The OneClick Chat to Order plugin for WordPress is vulnerable to Insecure Direct Object Reference... High Unreviewed
CVE-2025-13526 was published Nov 22, 2025
The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in... High Unreviewed
CVE-2025-13384 was published Nov 22, 2025
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that... High Unreviewed
CVE-2025-7425 was published Jul 10, 2025
A low privileged remote attacker can upload a new or overwrite an existing python script by using... High Unreviewed
CVE-2025-41736 was published Nov 18, 2025
Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ... High Unreviewed
CVE-2019-9674 was published May 24, 2022
Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to... High Unreviewed
CVE-2025-62626 was published Nov 21, 2025
The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File... High Unreviewed
CVE-2025-11087 was published Nov 21, 2025
thread-amount Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS High
CVE-2025-65947 was published for thread-amount (Rust) Nov 21, 2025
jzeuzs
Credited to jzeuzs
Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers. High Unreviewed
CVE-2025-12056 was published Nov 19, 2025
An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 -... High Unreviewed
CVE-2025-60738 was published Nov 20, 2025
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege... High Unreviewed
CVE-2023-30799 was published Jul 19, 2023
The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue.... High Unreviewed
CVE-2023-30800 was published Sep 7, 2023
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0... High Unreviewed
CVE-2014-0496 was published May 14, 2022
This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen... High Unreviewed
CVE-2025-13132 was published Nov 21, 2025
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public... High Unreviewed
CVE-2025-13470 was published Nov 21, 2025
The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress... High Unreviewed
CVE-2025-12973 was published Nov 21, 2025
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/... High Unreviewed
CVE-2025-61138 was published Nov 21, 2025
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6... High Unreviewed
CVE-2025-11243 was published Nov 19, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database