Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,651
Maven
5,000+
npm
4,279
NuGet
760
pip
4,066
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

44 advisories

Loading
EverShop is vulnerable to Unauthorized Order Information Access (IDOR) Low
CVE-2025-12919 was published for @evershop/evershop (npm) Nov 9, 2025
A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The... Low Unreviewed
CVE-2025-12918 was published Nov 9, 2025
A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The... Moderate Unreviewed
CVE-2025-12270 was published Oct 27, 2025
A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow... High Unreviewed
CVE-2025-43491 was published Sep 9, 2025
A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is... Moderate Unreviewed
CVE-2025-9619 was published Aug 29, 2025
A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is... Moderate Unreviewed
CVE-2025-9263 was published Aug 21, 2025
A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function... Moderate Unreviewed
CVE-2025-9264 was published Aug 21, 2025
A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected... Moderate Unreviewed
CVE-2025-8793 was published Aug 10, 2025
A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus... Low Unreviewed
CVE-2025-6534 was published Jun 26, 2025
Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP... High Unreviewed
CVE-2025-2410 was published May 22, 2025
A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as... Moderate Unreviewed
CVE-2025-3855 was published Apr 22, 2025
Overview   The product receives input from an upstream component, but it does not restrict... Critical Unreviewed
CVE-2025-0756 was published Apr 17, 2025
A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as... Moderate Unreviewed
CVE-2025-3405 was published Apr 8, 2025
A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This... Moderate Unreviewed
CVE-2025-2125 was published Mar 9, 2025
A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical.... Moderate Unreviewed
CVE-2025-1642 was published Feb 25, 2025
A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this... Moderate Unreviewed
CVE-2025-1645 was published Feb 25, 2025
A vulnerability classified as problematic has been found in Harpia DiagSystem 12. Affected is an... Moderate Unreviewed
CVE-2025-1575 was published Feb 23, 2025
The product receives input from an upstream component, but it does not restrict or incorrectly... High Unreviewed
CVE-2024-5706 was published Feb 20, 2025
DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30... Critical Unreviewed
CVE-2024-57971 was published Feb 16, 2025
A vulnerability, which was classified as problematic, was found in CampCodes School Management... Low Unreviewed
CVE-2025-0625 was published Jan 22, 2025
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage... Moderate Unreviewed
CVE-2023-6604 was published Jan 6, 2025
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file... Moderate Unreviewed
CVE-2023-6601 was published Jan 6, 2025
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET... High Unreviewed
CVE-2023-6605 was published Jan 6, 2025
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service... High Unreviewed
CVE-2023-6603 was published Dec 31, 2024
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration... Moderate Unreviewed
CVE-2023-6602 was published Dec 31, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database