Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

202 advisories

Loading
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker... High Unreviewed
CVE-2025-58464 was published Nov 7, 2025
IQ-Support developed by IQ Service International has an Arbitrary File Read vulnerability,... High Unreviewed
CVE-2025-13161 was published Nov 14, 2025
The API used to interact with documents in the application contains two endpoints with a flaw... High Unreviewed
CVE-2024-54449 was published Mar 14, 2025
Argo Workflow has a Zipslip Vulnerability High
CVE-2025-62156 was published for github.com/argoproj/argo-workflows/v3 (Go) Oct 14, 2025
im-soohyun Credited to im-soohyun and J1vvoo J1vvoo J1vvoo
Local File Inclusion in Rack::Static High
CVE-2025-27610 was published for rack (RubyGems) Mar 10, 2025
Masamuneee Credited to Masamuneee, jeremyevans, and ioquatix jeremyevans jeremyevans
ioquatix ioquatix
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4... High Unreviewed
CVE-2025-58429 was published Oct 24, 2025
A relative path traversal vulnerability was discovered in Productivity Suite software version 4... High Unreviewed
CVE-2025-58456 was published Oct 24, 2025
A relative path traversal vulnerability was discovered in Productivity Suite software version 4... High Unreviewed
CVE-2025-58078 was published Oct 24, 2025
A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software... High Unreviewed
CVE-2025-62498 was published Oct 24, 2025
Directory traversal attack in Spring Cloud Config High
CVE-2020-5410 was published for org.springframework.cloud:spring-cloud-config-server (Maven) Jun 5, 2020
Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing... High Unreviewed
CVE-2025-11898 was published Oct 17, 2025
Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that... High Unreviewed
CVE-2025-10203 was published Sep 15, 2025
The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing... High Unreviewed
CVE-2025-9639 was published Aug 29, 2025
Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2025-53779 was published Aug 12, 2025
An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can... High Unreviewed
CVE-2025-54317 was published Jul 20, 2025
In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows High Unreviewed
CVE-2025-54531 was published Jul 28, 2025
A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs... High Unreviewed
CVE-2024-10513 was published Mar 20, 2025
BatchSignCS, a background Windows application developed by WellChoose, has an Arbitrary File... High Unreviewed
CVE-2025-7619 was published Jul 14, 2025
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code... High Unreviewed
CVE-2025-48817 was published Jul 8, 2025
The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing... High Unreviewed
CVE-2025-7146 was published Jul 8, 2025
Directory traversal vulnerability in the Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4... High Unreviewed
CVE-2012-6069 was published May 17, 2022
raspap-webgui has a Directory Traversal vulnerability High
CVE-2025-44163 was published for billz/raspap-webgui (Composer) Jun 27, 2025
AstrBot Has Path Traversal Vulnerability in /api/chat/get_file High
CVE-2025-48957 was published for astrbot (pip) Jun 4, 2025
7resp4ss Credited to 7resp4ss, Soulter, and Raven95676 Soulter Soulter
Raven95676 Raven95676
Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated... High Unreviewed
CVE-2025-52922 was published Jun 23, 2025
Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions... High Unreviewed
CVE-2025-34510 was published Jun 17, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database