Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

21 advisories

Loading
Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path... High Unreviewed
CVE-2022-2788 was published Aug 20, 2022
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9. High Unreviewed
CVE-2023-1034 was published Feb 25, 2023
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by... High Unreviewed
CVE-2023-0104 was published Jul 6, 2023
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12... High Unreviewed
CVE-2023-6130 was published Nov 14, 2023
An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in... High Unreviewed
CVE-2023-6023 was published Nov 16, 2023
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path... High Unreviewed
CVE-2024-34470 was published May 6, 2024
A vulnerability in the parisneo/lollms-webui allows for arbitrary file upload and read due to... Critical Unreviewed
CVE-2024-2361 was published May 16, 2024
A path traversal vulnerability in the '/apply_settings' endpoint of parisneo/lollms-webui allows... Critical Unreviewed
CVE-2024-2358 was published May 16, 2024
A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms... High Unreviewed
CVE-2024-3435 was published May 16, 2024
A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically... High Unreviewed
CVE-2024-4322 was published May 16, 2024
A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the ... High Unreviewed
CVE-2024-2178 was published Jun 2, 2024
A TarSlip vulnerability exists in the deepjavalibrary/djl, affecting version 0.26.0 and fixed in... High Unreviewed
CVE-2024-2914 was published Jun 6, 2024
A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui... Critical Unreviewed
CVE-2024-2624 was published Jun 6, 2024
parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code... Critical Unreviewed
CVE-2024-2360 was published Jun 6, 2024
A remote code execution (RCE) vulnerability exists in the '/install_extension' endpoint of the... Critical Unreviewed
CVE-2024-4320 was published Jun 6, 2024
A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the ... Critical Unreviewed
CVE-2024-5211 was published Jun 12, 2024
A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the ... Moderate Unreviewed
CVE-2024-4841 was published Jun 23, 2024
Path Traversal: '\..\filename' in GitHub repository stitionai/devika prior to -. Critical Unreviewed
CVE-2024-5926 was published Jun 30, 2024
Path Traversal: '\..\filename' in aimhubio/aim Critical Unreviewed
CVE-2024-6396 was published Jul 12, 2024
A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The... High Unreviewed
CVE-2024-6394 was published Sep 30, 2024
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to... High Unreviewed
CVE-2024-7962 was published Oct 29, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database