Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,153
Maven
5,000+
npm
3,818
NuGet
693
pip
3,492
Pub
12
RubyGems
902
Rust
903
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

247,010 advisories

Loading
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices... Moderate Unreviewed
CVE-2025-27257 was published Mar 10, 2025
An improper input validation in GE Vernova UR IED family devices from version 7.0 up to 8.60... Moderate Unreviewed
CVE-2025-27253 was published Mar 10, 2025
Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege... High Unreviewed
CVE-2025-27255 was published Mar 10, 2025
Improper Authentication vulnerability in GE Vernova EnerVista UR Setup allows Authentication... High Unreviewed
CVE-2025-27254 was published Mar 10, 2025
The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote... Moderate Unreviewed
CVE-2025-2150 was published Mar 10, 2025
Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup... High Unreviewed
CVE-2025-27256 was published Mar 10, 2025
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-1926 was published Mar 10, 2025
The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis... Unknown Unreviewed
CVE-2024-11638 was published Mar 10, 2025
Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP)... High Unreviewed
CVE-2024-43107 was published Mar 10, 2025
Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration... High Unreviewed
CVE-2024-41724 was published Mar 10, 2025
A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown... Moderate Unreviewed
CVE-2025-2132 was published Mar 10, 2025
A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This... Moderate Unreviewed
CVE-2025-2130 was published Mar 10, 2025
A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This... Moderate Unreviewed
CVE-2025-2131 was published Mar 10, 2025
A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability... Moderate Unreviewed
CVE-2025-2133 was published Mar 10, 2025
A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects... Moderate Unreviewed
CVE-2025-2129 was published Mar 9, 2025
Lua 5.4.7, when the debug library is used, has a out-of-bounds read and segmentation violation in... Unknown Unreviewed
CVE-2025-26204 was published Mar 9, 2025
Lua 5.4.7, when the debug library is used, has a out-of-bounds read and segmentation violation in... Unknown Unreviewed
CVE-2025-26205 was published Mar 9, 2025
A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as... Moderate Unreviewed
CVE-2025-2127 was published Mar 9, 2025
A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0.... Moderate Unreviewed
CVE-2025-2124 was published Mar 9, 2025
A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical.... Moderate Unreviewed
CVE-2025-2126 was published Mar 9, 2025
A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This... Moderate Unreviewed
CVE-2025-2125 was published Mar 9, 2025
A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to... Low Unreviewed
CVE-2025-2122 was published Mar 9, 2025
A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1.... Moderate Unreviewed
CVE-2025-2123 was published Mar 9, 2025
Bypass/Injection vulnerability in Apache Camel-Bean component under particular conditions. This... Unknown Unreviewed
CVE-2025-27636 was published Mar 9, 2025
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as... Low Unreviewed
CVE-2025-2120 was published Mar 9, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database