GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,466
Erlang
33
GitHub Actions
23
Go
2,166
Maven
5,000+
npm
3,830
NuGet
696
pip
3,507
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+
329 advisories
Filter by severity
Vela Server Has Insufficient Webhook Payload Data Verification
High
CVE-2025-27616
was published
for
github.com/go-vela/server
(Go)
Mar 10, 2025
Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a...
Moderate
Unreviewed
CVE-2025-0446
was published
Jan 15, 2025
In the case of instances where the SAML SSO authentication is enabled (non-default), session data...
Critical
Unreviewed
CVE-2022-23131
was published
Jan 14, 2022
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which...
High
Unreviewed
CVE-2025-26696
was published
Mar 10, 2025
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication...
Critical
Unreviewed
CVE-2024-54085
was published
Mar 11, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...
Critical
Unreviewed
CVE-2025-27671
was published
Mar 5, 2025
OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled
High
CVE-2024-32977
was published
for
OctoPrint
(pip)
May 14, 2024
Security Update for the OPC UA .NET Standard Stack
Moderate
CVE-2024-42513
was published
for
OPCFoundation.NetStandard.Opc.Ua.Bindings.Https
(NuGet)
Mar 3, 2025
Duplicate Advisory: Authentication Bypass by Spoofing in OPC UA .NET Standard Stack
Moderate
GHSA-7wwr-h8cm-9jf7
was published
for
OPCFoundation.NetStandard.Opc.Ua
(NuGet)
Feb 10, 2025
•
withdrawn
Microsoft OneNote Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-36769
was published
Nov 7, 2023
Microsoft OneNote Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-33140
was published
Jun 14, 2023
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-29334
was published
Apr 28, 2023
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-24935
was published
Apr 11, 2023
Microsoft Exchange Server Spoofing Vulnerability
High
Unreviewed
CVE-2021-31209
was published
May 24, 2022
Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021...
High
Unreviewed
CVE-2021-31195
was published
May 24, 2022
Microsoft SharePoint Spoofing Vulnerability This CVE ID is unique from CVE-2021-26418, CVE-2021...
High
Unreviewed
CVE-2021-28478
was published
May 24, 2022
Microsoft SharePoint Spoofing Vulnerability This CVE ID is unique from CVE-2021-26418, CVE-2021...
High
Unreviewed
CVE-2021-31172
was published
May 24, 2022
Microsoft SharePoint Spoofing Vulnerability This CVE ID is unique from CVE-2021-28478, CVE-2021...
High
Unreviewed
CVE-2021-26418
was published
May 24, 2022
Microsoft Edge for Android Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-38173
was published
Jul 21, 2023
Microsoft Edge for iOS Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-36883
was published
Jul 14, 2023
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Moderate
Unreviewed
CVE-2023-35392
was published
Jul 21, 2023
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
High
Unreviewed
CVE-2023-24892
was published
Mar 14, 2023
The application or its infrastructure allows for IP address spoofing by providing its own value...
Moderate
Unreviewed
CVE-2025-22271
was published
Feb 28, 2025
The control component has a spoofing vulnerability. Successful exploitation of this vulnerability...
Critical
Unreviewed
CVE-2022-48349
was published
Mar 28, 2023
ProTip!
Advisories are also available from the
GraphQL API