Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

44 advisories

Loading
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an... Moderate Unreviewed
CVE-2023-4605 was published Apr 5, 2024
An information disclosure flaw was found in OpenShift Virtualization. The DownwardMetrics feature... Moderate Unreviewed
CVE-2024-31419 was published Apr 3, 2024
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0... Moderate Unreviewed
CVE-2023-50959 was published Mar 31, 2024
Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions... Moderate Unreviewed
CVE-2024-22124 was published Jan 9, 2024
Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53,... Moderate Unreviewed
CVE-2023-41366 was published Nov 14, 2023
Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template... Moderate Unreviewed
CVE-2023-34209 was published Oct 17, 2023
Ansible may expose private key Moderate
CVE-2023-4237 was published for ansible-core (pip) Oct 4, 2023
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)... Moderate Unreviewed
CVE-2023-20111 was published Aug 17, 2023
SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep... Moderate Unreviewed
CVE-2023-37487 was published Aug 8, 2023
MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app... Moderate Unreviewed
CVE-2023-0342 was published Jun 9, 2023
The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to... Moderate Unreviewed
CVE-2023-2541 was published Jun 7, 2023
A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to... Moderate Unreviewed
CVE-2023-0005 was published Apr 12, 2023
"IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version information... Moderate Unreviewed
CVE-2022-38710 was published Nov 4, 2022
A credentials leak was found in the OpenShift Container Platform. The private key for the... Moderate Unreviewed
CVE-2022-2403 was published Sep 2, 2022
Windows Kernel Information Disclosure Vulnerability Moderate Unreviewed
CVE-2021-31955 was published May 24, 2022
A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an... Moderate Unreviewed
CVE-2021-1544 was published May 24, 2022
A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow... Moderate Unreviewed
CVE-2021-1535 was published May 24, 2022
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local... Moderate Unreviewed
CVE-2021-1235 was published May 24, 2022
A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to... Moderate Unreviewed
CVE-2022-20734 was published May 5, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database