Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

9 advisories

Loading
In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission... Critical Unreviewed
CVE-2024-1608 was published Feb 20, 2024
Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user... Critical Unreviewed
CVE-2024-5163 was published Jun 17, 2024
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions Critical
CVE-2024-25108 was published for pixelfed/pixelfed (Composer) Feb 12, 2024
ThisIsMissEm Credited to ThisIsMissEm and nivenly-foundation nivenly-foundation nivenly-foundation
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients... Critical Unreviewed
CVE-2024-46874 was published Dec 6, 2024
An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain... Critical Unreviewed
CVE-2024-24116 was published Oct 2, 2024
Kernel software installed and running inside an untrusted/rich execution environment (REE) could... Critical Unreviewed
CVE-2025-6573 was published Aug 9, 2025
anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and... Critical Unreviewed
CVE-2024-7314 was published Aug 2, 2024
An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges Critical Unreviewed
CVE-2025-46066 was published Jan 12, 2026
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. ... Critical Unreviewed
CVE-2026-41566 was published Jun 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database