GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,476
Erlang
33
GitHub Actions
24
Go
2,207
Maven
5,000+
npm
3,858
NuGet
696
pip
3,639
Pub
12
RubyGems
913
Rust
918
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
136 advisories
Filter by severity
An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform...
High
Unreviewed
CVE-2024-9363
was published
Mar 20, 2025
A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an...
Moderate
Unreviewed
CVE-2024-7058
was published
Mar 20, 2025
A path traversal vulnerability exists in the latest version of stangirard/quivr. This...
Moderate
Unreviewed
CVE-2024-6583
was published
Mar 20, 2025
A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs...
High
Unreviewed
CVE-2024-10513
was published
Mar 20, 2025
A vulnerability in the `start_app_server` function of parisneo/lollms-webui V12 (Strawberry)...
Moderate
Unreviewed
CVE-2024-10019
was published
Mar 20, 2025
The API used to interact with documents in the application contains two endpoints with a flaw...
High
Unreviewed
CVE-2024-54449
was published
Mar 14, 2025
The API used to interact with documents in the application contains a flaw that allows an...
High
Unreviewed
CVE-2024-12019
was published
Mar 14, 2025
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path...
High
Unreviewed
CVE-2025-2056
was published
Mar 14, 2025
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal...
High
Unreviewed
CVE-2025-23360
was published
Mar 11, 2025
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code...
High
Unreviewed
CVE-2025-26645
was published
Mar 11, 2025
When uploading organism or sequence data via the web interface,
GMOD Apollo
will unzip and...
Critical
Unreviewed
CVE-2025-23410
was published
Mar 5, 2025
Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File...
High
Unreviewed
CVE-2025-25130
was published
Mar 3, 2025
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion...
Moderate
Unreviewed
CVE-2024-56340
was published
Feb 28, 2025
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been...
Moderate
Unreviewed
CVE-2025-1599
was published
Feb 24, 2025
A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as...
Moderate
Unreviewed
CVE-2025-1588
was published
Feb 23, 2025
Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter...
Critical
Unreviewed
CVE-2025-20059
was published
Feb 20, 2025
Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and...
Moderate
Unreviewed
CVE-2025-0822
was published
Feb 15, 2025
Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and...
Moderate
Unreviewed
CVE-2024-13791
was published
Feb 14, 2025
A CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or...
High
Unreviewed
CVE-2025-26349
was published
Feb 12, 2025
A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as...
Moderate
Unreviewed
CVE-2025-1086
was published
Feb 7, 2025
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A...
High
Unreviewed
CVE-2025-23011
was published
Jan 23, 2025
A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and...
Moderate
Unreviewed
CVE-2024-46664
was published
Jan 14, 2025
A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through...
Moderate
Unreviewed
CVE-2024-32115
was published
Jan 14, 2025
A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms...
Moderate
Unreviewed
CVE-2025-0390
was published
Jan 11, 2025
A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives...
Moderate
Unreviewed
CVE-2025-0225
was published
Jan 5, 2025
ProTip!
Advisories are also available from the
GraphQL API