Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+

2,732 advisories

Loading
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory... High Unreviewed
CVE-2024-8104 was published Sep 4, 2024
Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute... High Unreviewed
CVE-2024-34656 was published Sep 4, 2024
Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) High
CVE-2024-45388 was published for github.com/spectolabs/hoverfly (Go) Sep 3, 2024
pwntester
@actions/download-artifact has an Arbitrary File Write via artifact extraction High
GHSA-cxww-7g56-2vh6 was published for actions/download-artifact (GitHub Actions) Sep 3, 2024
holmanb
@actions/artifact has an Arbitrary File Write via artifact extraction High
CVE-2024-42471 was published for @actions/artifact (npm) Sep 3, 2024
JLHwung
Ollama can extract members of a ZIP archive outside of the parent directory High
CVE-2024-45436 was published for github.com/ollama/ollama (Go) Aug 29, 2024
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 allows... High Unreviewed
CVE-2024-6789 was published Aug 27, 2024
unzip-stream allows Arbitrary File Write via artifact extraction High
GHSA-6jrj-vc65-c983 was published for unzip-stream (npm) Aug 26, 2024
A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management)... High Unreviewed
CVE-2024-45241 was published Aug 26, 2024
Python Pip Pandas v2.2.2 was discovered to contain an arbitrary file read vulnerability. High Unreviewed
CVE-2024-42992 was published Aug 23, 2024
Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability... High Unreviewed
CVE-2024-6141 was published Aug 21, 2024
An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03,... High Unreviewed
CVE-2024-43022 was published Aug 21, 2024
Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This... High Unreviewed
CVE-2024-7600 was published Aug 21, 2024
Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File... High Unreviewed
CVE-2024-7601 was published Aug 21, 2024
Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability.... High Unreviewed
CVE-2024-7603 was published Aug 21, 2024
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form &... High Unreviewed
CVE-2024-7782 was published Aug 20, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-43345 was published Aug 19, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-43328 was published Aug 19, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-43248 was published Aug 19, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-43271 was published Aug 19, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-43232 was published Aug 19, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-43221 was published Aug 19, 2024
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files High
CVE-2024-43399 was published for mobsf (pip) Aug 19, 2024
bulutenes
The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,... High Unreviewed
CVE-2024-7145 was published Aug 16, 2024
The JetTabs for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all... High Unreviewed
CVE-2024-7146 was published Aug 16, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database