GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,726
Maven
5,000+
npm
4,331
NuGet
763
pip
4,107
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
283 advisories
Filter by severity
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account...
Critical
Unreviewed
CVE-2025-34291
was published
Dec 6, 2025
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3...
Moderate
Unreviewed
CVE-2025-8074
was published
Dec 4, 2025
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin...
Moderate
Unreviewed
CVE-2025-37734
was published
Nov 12, 2025
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80...
Moderate
Unreviewed
CVE-2025-12905
was published
Nov 8, 2025
Nagios XI versions prior to 2024R1.2.2 contain a host header injection vulnerability. The...
High
Unreviewed
CVE-2024-14006
was published
Oct 31, 2025
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual...
High
Unreviewed
CVE-2025-62584
was published
Oct 16, 2025
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an...
Moderate
Unreviewed
CVE-2025-2140
was published
Oct 12, 2025
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks...
High
Unreviewed
CVE-2025-59957
was published
Oct 9, 2025
A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the...
Moderate
Unreviewed
CVE-2025-42706
was published
Oct 8, 2025
A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1. Affected by this vulnerability...
Moderate
Unreviewed
CVE-2025-11304
was published
Oct 5, 2025
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point ...
Moderate
Unreviewed
CVE-2025-20364
was published
Sep 24, 2025
Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.This issue...
High
Unreviewed
CVE-2024-13068
was published
Sep 3, 2025
An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client...
High
Unreviewed
CVE-2025-51605
was published
Aug 22, 2025
'Same-origin policy bypass in the Graphics: Canvas2D component.' This vulnerability affects...
High
Unreviewed
CVE-2025-9180
was published
Aug 19, 2025
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP...
Moderate
Unreviewed
CVE-2025-52621
was published
Aug 16, 2025
In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic...
Moderate
Unreviewed
CVE-2025-53399
was published
Aug 1, 2025
Whale browser before 4.32.315.22 allow an attacker to bypass the Same-Origin Policy in a dual-tab...
High
Unreviewed
CVE-2025-53600
was published
Jul 4, 2025
Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass...
Moderate
Unreviewed
CVE-2025-5824
was published
Jun 26, 2025
The security settings in the SAP Business One Integration Framework are not adequately checked,...
Moderate
Unreviewed
CVE-2025-42998
was published
Jun 10, 2025
An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may...
High
Unreviewed
CVE-2024-31127
was published
Jun 4, 2025
This issue was addressed through improved state management. This issue is fixed in Safari 18.4,...
Critical
Unreviewed
CVE-2025-30466
was published
May 30, 2025
Error handling for script execution was incorrectly isolated from web content, which could have...
Moderate
Unreviewed
CVE-2025-5263
was published
May 27, 2025
A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as...
Low
Unreviewed
CVE-2025-4839
was published
May 18, 2025
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS)...
High
Unreviewed
CVE-2025-46737
was published
May 12, 2025
A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统...
Low
Unreviewed
CVE-2025-4542
was published
May 11, 2025
ProTip!
Advisories are also available from the
GraphQL API