Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,076
Erlang
29
GitHub Actions
19
Go
1,895
Maven
5,000+
npm
3,630
NuGet
638
pip
3,244
Pub
10
RubyGems
862
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

20 advisories

Loading
A verbose error handling issue in the proxy service implemented in the GravityZone Update Server... Critical Unreviewed
CVE-2024-6980 was published Jul 31, 2024
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of... Critical Unreviewed
CVE-2024-28285 was published May 14, 2024
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during... Critical Unreviewed
CVE-2023-40757 was published Aug 28, 2023
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during... Critical Unreviewed
CVE-2023-40761 was published Aug 28, 2023
User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during... Critical Unreviewed
CVE-2023-40762 was published Aug 28, 2023
User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during... Critical Unreviewed
CVE-2023-40764 was published Aug 28, 2023
User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during... Critical Unreviewed
CVE-2023-40759 was published Aug 28, 2023
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during... Critical Unreviewed
CVE-2023-40763 was published Aug 28, 2023
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during... Critical Unreviewed
CVE-2023-40767 was published Aug 28, 2023
User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password... Critical Unreviewed
CVE-2023-40758 was published Aug 28, 2023
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during... Critical Unreviewed
CVE-2023-40760 was published Aug 28, 2023
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during... Critical Unreviewed
CVE-2023-40766 was published Aug 28, 2023
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during... Critical Unreviewed
CVE-2023-40765 was published Aug 28, 2023
Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an... Critical Unreviewed
CVE-2021-42777 was published Oct 29, 2022
Weave GitOps leaked cluster credentials into logs on connection errors Critical
CVE-2022-31098 was published for github.com/weaveworks/weave-gitops (Go) Jun 23, 2022
stefanprodan
389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks... Critical Unreviewed
CVE-2017-7551 was published May 14, 2022
Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace... Critical Unreviewed
CVE-2018-14925 was published May 13, 2022
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill... Critical Unreviewed
CVE-2018-11325 was published May 13, 2022
The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0... Critical Unreviewed
CVE-2017-7945 was published May 13, 2022
Critical severity vulnerability that affects Auth0-WCF-Service-JWT Critical
CVE-2019-7644 was published for Auth0-WCF-Service-JWT (NuGet) Apr 18, 2019
ProTip! Advisories are also available from the GraphQL API