Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,476
Erlang
33
GitHub Actions
24
Go
2,203
Maven
5,000+
npm
3,857
NuGet
696
pip
3,639
Pub
12
RubyGems
912
Rust
913
Swift
38
Unreviewed advisories
All unreviewed
5,000+

25,008 advisories

Loading
Deserialization of Untrusted Data vulnerability in Shinetheme Traveler.This issue affects... Critical Unreviewed
CVE-2025-26873 was published Mar 28, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-26898 was published Mar 28, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Critical Unreviewed
CVE-2025-26909 was published Mar 27, 2025
The use of a weak cryptographic key pair in the signature verification process in WPS Office ... Critical Unreviewed
CVE-2025-2516 was published Mar 27, 2025
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP... Critical Unreviewed
CVE-2025-2332 was published Mar 27, 2025
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login... Critical Unreviewed
CVE-2025-26007 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin... Critical Unreviewed
CVE-2025-26010 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when... Critical Unreviewed
CVE-2025-26003 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the... Critical Unreviewed
CVE-2025-26011 was published Mar 26, 2025
In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when... Critical Unreviewed
CVE-2025-26008 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the... Critical Unreviewed
CVE-2025-26006 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when... Critical Unreviewed
CVE-2025-26005 was published Mar 26, 2025
HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate... Critical Unreviewed
CVE-2025-25535 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when... Critical Unreviewed
CVE-2025-26002 was published Mar 26, 2025
Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability... Critical Unreviewed
CVE-2025-26004 was published Mar 26, 2025
CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability... Critical Unreviewed
CVE-2025-2825 was published Mar 26, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-28942 was published Mar 26, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-30524 was published Mar 26, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Visual Text... Critical Unreviewed
CVE-2025-28893 was published Mar 26, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Critical Unreviewed
CVE-2025-28916 was published Mar 26, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-28898 was published Mar 26, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-26941 was published Mar 26, 2025
Improper permission control vulnerability in the OXARI ServiceDesk application could allow an... Critical Unreviewed
CVE-2025-1542 was published Mar 26, 2025
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the... Critical Unreviewed
CVE-2024-47516 was published Mar 26, 2025
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression... Critical Unreviewed
CVE-2025-27832 was published Mar 25, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database