Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,985
Erlang
29
GitHub Actions
16
Go
1,774
Maven
5,000
npm
3,541
NuGet
617
pip
3,123
Pub
10
RubyGems
838
Rust
790
Swift
34
Unreviewed advisories
All unreviewed
5,000+

8 advisories

Loading
Aimeos denial of service vulnerability in SaaS and marketplace setups Moderate
CVE-2024-37294 was published for aimeos/aimeos-core (Composer) May 29, 2024
ssshah2131
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro High
CVE-2023-37912 was published for org.xwiki.platform:xwiki-core-rendering-macro-footnotes (Maven) Oct 25, 2023
Apache Airflow vulnerable to Privilege Context Switching Error Critical
CVE-2023-25754 was published for apache-airflow (pip) May 8, 2023
xwiki-platform vulnerable to Remote Code Execution in Annotations Critical
CVE-2023-26475 was published for org.xwiki.platform:xwiki-platform-annotation-ui (Maven) Mar 2, 2023
renniepak
The overlayfs implementation in the linux kernel did not properly validate with respect to user... High Unreviewed
CVE-2021-3493 was published May 24, 2022
Incorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL Critical Unreviewed
CVE-2020-25696 was published Feb 15, 2022
Privilege Context Switching Error in wildlfy Moderate
CVE-2020-1719 was published for org.wildfly.bom:wildfly (Maven) Jun 8, 2021
Privilege Context Switching Error in Elasticsearch Low
CVE-2020-7020 was published for org.elasticsearch:elasticsearch (Maven) Mar 18, 2021
ProTip! Advisories are also available from the GraphQL API