GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
127 advisories
Filter by severity
EasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0 are vulnerable to Incorrect Access Control. This...
High
Unreviewed
CVE-2024-53355
was published
Feb 1, 2025
In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections...
High
Unreviewed
CVE-2024-40672
was published
Jan 28, 2025
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.7...
High
Unreviewed
CVE-2024-54557
was published
Jan 28, 2025
Insecure default config access in WriteFreely
High
CVE-2025-24337
was published
for
github.com/writefreely/writefreely
(Go)
Jan 20, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low...
High
Unreviewed
CVE-2023-42228
was published
Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low...
High
Unreviewed
CVE-2023-42231
was published
Jan 14, 2025
SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access...
High
Unreviewed
CVE-2024-54818
was published
Jan 8, 2025
The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes)...
High
Unreviewed
CVE-2024-53934
was published
Jan 7, 2025
This issue was addressed with improved validation of the process entitlement and Team ID. This...
High
Unreviewed
CVE-2023-42867
was published
Dec 20, 2024
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-44211
was published
Dec 20, 2024
In Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0, the WriteAcl function deletes...
High
Unreviewed
CVE-2024-56317
was published
Dec 19, 2024
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2...
High
Unreviewed
CVE-2024-54515
was published
Dec 12, 2024
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers...
High
Unreviewed
CVE-2024-50920
was published
Dec 10, 2024
An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.
High
Unreviewed
CVE-2024-50930
was published
Dec 10, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...
High
Unreviewed
CVE-2024-41648
was published
Dec 7, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...
High
Unreviewed
CVE-2024-41650
was published
Dec 7, 2024
The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed...
High
Unreviewed
CVE-2024-37575
was published
Dec 4, 2024
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or ...
High
Unreviewed
CVE-2024-10458
was published
Oct 29, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-44149
was published
Sep 17, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-27795
was published
Sep 17, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-40770
was published
Sep 17, 2024
Improper Preservation of Permissions in xxl-job
High
CVE-2024-42681
was published
for
com.xuxueli:xxl-job-core
(Maven)
Aug 15, 2024
In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin...
High
Unreviewed
CVE-2024-23464
was published
Aug 6, 2024
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-40821
was published
Jul 30, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 10...
High
Unreviewed
CVE-2024-40805
was published
Jul 30, 2024
ProTip!
Advisories are also available from the
GraphQL API