Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

203 advisories

Loading
Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions... High Unreviewed
CVE-2025-34510 was published Jun 17, 2025
IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to... High Unreviewed
CVE-2025-33112 was published Jun 10, 2025
Relative Path Traversal vulnerability in Themewinter Eventin allows Path Traversal.This issue... High Unreviewed
CVE-2025-47445 was published May 14, 2025
A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS... High Unreviewed
CVE-2025-24350 was published Apr 30, 2025
A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The... High Unreviewed
CVE-2017-13996 was published May 13, 2022
Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users High
CVE-2025-32017 was published for Umbraco.Cms (NuGet) Apr 9, 2025
ggisz Credited to ggisz
Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an... High Unreviewed
CVE-2025-32409 was published Apr 8, 2025
Apache Commons VFS Has Relative Path Traversal Vulnerability High
CVE-2025-27553 was published for org.apache.commons:commons-vfs2 (Maven) Mar 23, 2025
An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform... High Unreviewed
CVE-2024-9363 was published Mar 20, 2025
The API used to interact with documents in the application contains a flaw that allows an... High Unreviewed
CVE-2024-12019 was published Mar 14, 2025
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path... High Unreviewed
CVE-2025-2056 was published Mar 14, 2025
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal... High Unreviewed
CVE-2025-23360 was published Mar 11, 2025
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code... High Unreviewed
CVE-2025-26645 was published Mar 11, 2025
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal High Unreviewed
CVE-2024-27770 was published Mar 18, 2024
Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File... High Unreviewed
CVE-2025-25130 was published Mar 3, 2025
A CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or... High Unreviewed
CVE-2025-26349 was published Feb 12, 2025
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance... High Unreviewed
CVE-2023-30630 was published Apr 13, 2023
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in... High Unreviewed
CVE-2024-54154 was published Dec 4, 2024
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A... High Unreviewed
CVE-2025-23011 was published Jan 23, 2025
@backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability High
CVE-2024-45816 was published for @backstage/plugin-techdocs-backend (npm) Sep 17, 2024
TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The... High Unreviewed
CVE-2024-12642 was published Dec 16, 2024
The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote... High Unreviewed
CVE-2024-11067 was published Nov 11, 2024
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers... High Unreviewed
CVE-2024-11310 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers... High Unreviewed
CVE-2024-11309 was published Nov 18, 2024
Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing... High Unreviewed
CVE-2024-10200 was published Oct 21, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database