Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

41 advisories

Loading
sh _uid does not drop supplementary groups (incomplete privilege drop) High
CVE-2026-54552 was published for sh (pip) Jul 17, 2026
Gares95 Credited to Gares95
PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default... High Unreviewed
CVE-2026-60085 was published Jul 15, 2026
id: groups= computed from real GID instead of effective GID Moderate
CVE-2026-35370 was published for uu_id (Rust) Jul 6, 2026
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from... High Unreviewed
CVE-2026-0099 was published Jun 2, 2026
Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(... Moderate Unreviewed
CVE-2026-44073 was published May 21, 2026
theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution High
CVE-2026-21882 was published for theshit (Rust) Mar 2, 2026
AsfhtgkDavid Credited to AsfhtgkDavid
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate... Critical Unreviewed
CVE-2025-53882 was published Jul 23, 2025
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0... High Unreviewed
CVE-2025-27396 was published Mar 11, 2025
A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for... High Unreviewed
CVE-2025-1003 was published Feb 4, 2025
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21399 was published Jan 17, 2025
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network... High Unreviewed
CVE-2024-38813 was published Sep 17, 2024
Internal browser event interfaces were exposed to web content when privileged EventHandler... High Unreviewed
CVE-2024-8382 was published Sep 3, 2024
Keycloak vulnerable to impersonation via logout token exchange Low
CVE-2023-0657 was published for org.keycloak:keycloak-services (Maven) Apr 17, 2024
Mattermost Server Improper Access Control Low
CVE-2024-21848 was published for github.com/mattermost/mattermost/server/v8 (Go) Apr 5, 2024
Ignite Realtime Openfire privilege escalation vulnerability High
CVE-2024-25420 was published for org.igniterealtime.openfire:xmppserver (Maven) Mar 26, 2024
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: skip... Moderate Unreviewed
CVE-2021-47129 was published Mar 15, 2024
netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in... Moderate Unreviewed
CVE-2023-52433 was published Feb 20, 2024
For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be... High Unreviewed
CVE-2023-34322 was published Jan 5, 2024
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a... Moderate Unreviewed
CVE-2023-26239 was published Oct 5, 2023
Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE... High Unreviewed
CVE-2023-5369 was published Oct 4, 2023
In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during... High Unreviewed
CVE-2023-35692 was published Jul 14, 2023
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification... Low Unreviewed
CVE-2023-21246 was published Jul 13, 2023
Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker... Critical Unreviewed
CVE-2023-34844 was published Jun 29, 2023
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This... High Unreviewed
CVE-2022-0358 was published Aug 29, 2022
Apache Superset allows authenticated users to access metadata they have no permission to Moderate
CVE-2021-37839 was published for apache-superset (pip) Jul 7, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database