GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,150
Maven
5,000+
npm
3,815
NuGet
690
pip
3,490
Pub
12
RubyGems
902
Rust
900
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
278 advisories
Filter by severity
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...
Critical
Unreviewed
CVE-2025-27671
was published
Mar 5, 2025
The application or its infrastructure allows for IP address spoofing by providing its own value...
Moderate
Unreviewed
CVE-2025-22271
was published
Feb 28, 2025
Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The...
Moderate
Unreviewed
CVE-2020-6158
was published
Feb 21, 2025
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software...
Moderate
Unreviewed
CVE-2023-51326
was published
Feb 20, 2025
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking...
Moderate
Unreviewed
CVE-2023-51323
was published
Feb 20, 2025
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Night Club Booking...
Moderate
Unreviewed
CVE-2023-51321
was published
Feb 20, 2025
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software...
Moderate
Unreviewed
CVE-2023-51327
was published
Feb 20, 2025
Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4...
Moderate
Unreviewed
CVE-2025-25055
was published
Feb 18, 2025
The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and...
Critical
Unreviewed
CVE-2022-3180
was published
Feb 12, 2025
The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1...
Moderate
Unreviewed
CVE-2024-36557
was published
Feb 6, 2025
Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to...
Critical
Unreviewed
CVE-2025-21415
was published
Jan 30, 2025
Authentication Bypass by Spoofing vulnerability in BestWebSoft Google Captcha allows Identity...
Moderate
Unreviewed
CVE-2025-24628
was published
Jan 27, 2025
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and...
High
Unreviewed
CVE-2025-24458
was published
Jan 21, 2025
Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a...
Moderate
Unreviewed
CVE-2025-0439
was published
Jan 15, 2025
Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a...
Moderate
Unreviewed
CVE-2025-0446
was published
Jan 15, 2025
Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83...
Moderate
Unreviewed
CVE-2025-0435
was published
Jan 15, 2025
Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83...
Moderate
Unreviewed
CVE-2025-0440
was published
Jan 15, 2025
Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote...
Moderate
Unreviewed
CVE-2025-0442
was published
Jan 15, 2025
The Electronic Official Document Management System from 2100 Technology has an Authentication...
Critical
Unreviewed
CVE-2024-13061
was published
Dec 31, 2024
In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp...
Critical
Unreviewed
CVE-2024-12108
was published
Dec 31, 2024
An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is...
Critical
Unreviewed
CVE-2024-54450
was published
Dec 27, 2024
An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing...
Moderate
Unreviewed
CVE-2024-55232
was published
Dec 19, 2024
Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows...
Moderate
Unreviewed
CVE-2023-41133
was published
Dec 13, 2024
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of...
Low
Unreviewed
CVE-2024-54158
was published
Dec 4, 2024
Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested....
High
Unreviewed
CVE-2024-50380
was published
Dec 2, 2024
ProTip!
Advisories are also available from the
GraphQL API