GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,752
Maven
4,982
npm
3,516
NuGet
609
pip
3,089
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+
2,020 advisories
Filter by severity
phpMyAdmin PHP code injection
High
CVE-2016-6609
was published
for
phpmyadmin/phpmyadmin
(Composer)
May 14, 2022
zend-mail remote code execution via Sendmail adapter
Critical
CVE-2016-10034
was published
for
zendframework/zend-mail
(Composer)
May 14, 2022
Drupal Core Arbitrary PHP code execution vulnerability
High
CVE-2020-13664
was published
for
drupal/core
(Composer)
May 24, 2022
Font-Converter Vulnerable to Arbitrary Command Injection
Critical
CVE-2022-21165
was published
for
font-converter
(npm)
Aug 29, 2022
SaltStack Salt is vulnerable to command injection
Critical
CVE-2019-17361
was published
for
salt
(pip)
May 24, 2022
SaltStack Salt command injection via a crafted process name
High
CVE-2020-28243
was published
for
salt
(pip)
May 24, 2022
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
Critical
CVE-2021-3148
was published
for
salt
(pip)
May 24, 2022
A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It...
Moderate
Unreviewed
CVE-2023-4414
was published
Aug 18, 2023
A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart...
Moderate
Unreviewed
CVE-2023-40146
was published
Apr 17, 2024
A vulnerability classified as critical has been found in Tenda AC500 2.0.1.9(1307). Affected is...
Moderate
Unreviewed
CVE-2024-3908
was published
Apr 17, 2024
llama-index-core Command Injection vulnerability
Critical
CVE-2024-3271
was published
for
llama-index-core
(pip)
Apr 16, 2024
Gradio's CI vulnerable to Command Injection
High
CVE-2024-1540
was published
for
gradio
(pip)
Mar 27, 2024
•
withdrawn
github-slug-action vulnerable to arbitrary code execution
High
CVE-2023-27581
was published
for
rlespinasse/github-slug-action
(GitHub Actions)
Mar 13, 2023
Outlook for Android Information Disclosure Vulnerability
High
Unreviewed
CVE-2024-26204
was published
Mar 12, 2024
Azure DevOps Server Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-20667
was published
Feb 13, 2024
Azure Storage Mover Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-20676
was published
Jan 9, 2024
EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE)...
High
Unreviewed
CVE-2023-33722
was published
May 31, 2023
An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of...
High
Unreviewed
CVE-2023-22306
was published
Jul 6, 2023
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in...
Critical
Unreviewed
CVE-2023-43204
was published
Sep 20, 2023
The Danfoss AK-EM100 web applications allow for OS command injection through the web application...
Critical
Unreviewed
CVE-2023-25911
was published
Jun 11, 2023
A vulnerability in a Virtualization Manager (VMAN) related CLI command of Cisco IOS XE Software...
High
Unreviewed
CVE-2019-12661
was published
May 24, 2022
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10...
High
Unreviewed
CVE-2023-45356
was published
Oct 9, 2023
Post-authentication remote command injection vulnerabilities in Western Digital My Cloud OS 5...
Moderate
Unreviewed
CVE-2023-22815
was published
Jul 1, 2023
ProTip!
Advisories are also available from the
GraphQL API