Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,856
Erlang
36
GitHub Actions
36
Go
2,488
Maven
5,000+
npm
4,104
NuGet
735
pip
3,923
Pub
12
RubyGems
945
Rust
1,017
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,868 advisories

Loading
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could... Low Unreviewed
CVE-2025-0011 was published Sep 6, 2025
An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious... Low Unreviewed
CVE-2023-31330 was published Sep 6, 2025
Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor... Low Unreviewed
CVE-2024-36331 was published Sep 6, 2025
An integer overflow in the SMU could allow a privileged attacker to potentially write memory... Low Unreviewed
CVE-2023-31365 was published Sep 6, 2025
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to... Low Unreviewed
CVE-2023-20516 was published Sep 6, 2025
Improper validation of an array index in the AMD graphics driver software could allow an attacker... Low Unreviewed
CVE-2023-31306 was published Sep 6, 2025
Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a... Low Unreviewed
CVE-2021-46750 was published Sep 6, 2025
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from... Low Unreviewed
CVE-2023-31326 was published Sep 6, 2025
A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous... Low Unreviewed
CVE-2025-10043 was published Sep 5, 2025
A vulnerability was identified in Cudy LT500E up to 2.3.12. Affected is an unknown function of... Low Unreviewed
CVE-2025-9725 was published Sep 5, 2025
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a... Low Unreviewed
CVE-2025-30200 was published Sep 5, 2025
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a... Low Unreviewed
CVE-2025-30198 was published Sep 5, 2025
In Permission Manager, there is a possible way for the microphone privacy indicator to remain... Low Unreviewed
CVE-2025-26461 was published Sep 5, 2025
A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of... Low Unreviewed
CVE-2025-10014 was published Sep 5, 2025
Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows... Low Unreviewed
CVE-2023-21471 was published Sep 5, 2025
Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3... Low Unreviewed
CVE-2025-21040 was published Sep 5, 2025
Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to... Low Unreviewed
CVE-2025-21039 was published Sep 5, 2025
Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to... Low Unreviewed
CVE-2025-21038 was published Sep 5, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami... Low Unreviewed
CVE-2025-58866 was published Sep 5, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in PickPlugins Job Board... Low Unreviewed
CVE-2025-58827 was published Sep 5, 2025
Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor allows... Low Unreviewed
CVE-2025-58816 was published Sep 5, 2025
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade... Low Unreviewed
CVE-2024-21977 was published Sep 5, 2025
In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic... Low Unreviewed
CVE-2025-26419 was published Sep 4, 2025
In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a... Low Unreviewed
CVE-2025-26428 was published Sep 4, 2025
In multiple locations, there is a possible way to view icons belonging to another user due to a... Low Unreviewed
CVE-2025-0076 was published Sep 4, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database