Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,767
Maven
5,000+
npm
4,373
NuGet
770
pip
4,145
Pub
12
RubyGems
962
Rust
1,070
Swift
45
Unreviewed advisories
All unreviewed
5,000+

16 advisories

Loading
rtvm-interpreter lacks sufficient checks in public API Low
GHSA-pq5v-rwp8-p7gm was published for rtvm-interpreter (Rust) Dec 2, 2025
An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0... Moderate Unreviewed
CVE-2025-47866 was published Jun 17, 2025
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955... High Unreviewed
CVE-2025-47865 was published Jun 17, 2025
Open WebUI Allows Viewing of Admin Details Moderate
CVE-2024-7046 was published for open-webui (pip) Mar 20, 2025
A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution... High Unreviewed
CVE-2024-12390 was published Mar 20, 2025
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb High
CVE-2024-10569 was published for gradio (pip) Mar 20, 2025
Undefined Behavior in mlflow Moderate
CVE-2024-3099 was published for mlflow (pip) Jun 6, 2024
A vulnerability in lunary-ai/lunary version 1.2.2 allows attackers to bypass user creation limits... Moderate Unreviewed
CVE-2024-4153 was published May 22, 2024
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to... High Unreviewed
CVE-2024-20380 was published Apr 18, 2024
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.... Moderate Unreviewed
CVE-2023-52533 was published Apr 8, 2024
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 Moderate Unreviewed
CVE-2023-4874 was published Sep 9, 2023
Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2... Moderate Unreviewed
CVE-2023-4875 was published Sep 9, 2023
distribution catalog API endpoint can lead to OOM via malicious user input High
CVE-2023-2253 was published for github.com/docker/distribution (Go) May 11, 2023
josegomezr
Credited to josegomezr
Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100. Moderate Unreviewed
CVE-2022-2598 was published Aug 2, 2022
Undefined behavior when users supply invalid resource handles Moderate
CVE-2022-29207 was published for tensorflow (pip) May 24, 2022
Incorrect validation of user input in the role name parser may lead to use of uninitialized... High Unreviewed
CVE-2020-7925 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database