Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,815
Erlang
36
GitHub Actions
32
Go
2,401
Maven
5,000+
npm
4,044
NuGet
723
pip
3,830
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

23,011 advisories

Loading
LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP... Critical Unreviewed
CVE-2025-50578 was published Jul 30, 2025
A Missing Authentication for Critical Function vulnerability in SUSE Manager allows anyone with... Critical Unreviewed
CVE-2025-46811 was published Jul 30, 2025
This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15... Critical Unreviewed
CVE-2025-43253 was published Jul 30, 2025
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2025-43275 was published Jul 30, 2025
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... Critical Unreviewed
CVE-2025-43237 was published Jul 30, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Critical Unreviewed
CVE-2025-43232 was published Jul 30, 2025
This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2025-43233 was published Jul 30, 2025
Multiple memory corruption issues were addressed with improved input validation. This issue is... Critical Unreviewed
CVE-2025-43234 was published Jul 30, 2025
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2025-43244 was published Jul 30, 2025
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in... Critical Unreviewed
CVE-2025-43245 was published Jul 30, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS... Critical Unreviewed
CVE-2025-43194 was published Jul 30, 2025
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in... Critical Unreviewed
CVE-2025-43209 was published Jul 30, 2025
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS... Critical Unreviewed
CVE-2025-43199 was published Jul 30, 2025
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15... Critical Unreviewed
CVE-2025-43198 was published Jul 30, 2025
The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS... Critical Unreviewed
CVE-2025-43186 was published Jul 30, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2025-24119 was published Jul 30, 2025
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows... Critical Unreviewed
CVE-2025-40600 was published Jul 30, 2025
MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter ... Critical Unreviewed
CVE-2025-44136 was published Jul 29, 2025
langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the... Critical Unreviewed
CVE-2025-46059 was published Jul 29, 2025
A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered. Critical Unreviewed
CVE-2025-54298 was published Jul 28, 2025
A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for... Critical Unreviewed
CVE-2025-54299 was published Jul 28, 2025
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect... Critical Unreviewed
CVE-2025-53696 was published Jul 28, 2025
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with... Critical Unreviewed
CVE-2025-30125 was published Jul 28, 2025
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to... Critical Unreviewed
CVE-2025-53695 was published Jul 28, 2025
An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues... Critical Unreviewed
CVE-2025-26469 was published Jul 28, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database