GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,468
Erlang
33
GitHub Actions
23
Go
2,172
Maven
5,000+
npm
3,833
NuGet
696
pip
3,508
Pub
12
RubyGems
910
Rust
908
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
35 advisories
Filter by severity
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management ...
Moderate
Unreviewed
CVE-2021-27414
was published
Mar 12, 2022
A vulnerability, which was classified as problematic, has been found in SourceCodester Gym...
Moderate
Unreviewed
CVE-2022-2800
was published
Aug 13, 2022
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90...
Moderate
Unreviewed
CVE-2023-2937
was published
May 31, 2023
Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an...
Moderate
Unreviewed
CVE-2023-2941
was published
May 31, 2023
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90...
Moderate
Unreviewed
CVE-2023-2938
was published
May 31, 2023
A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque...
Moderate
Unreviewed
CVE-2023-4956
was published
Nov 7, 2023
IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the...
Moderate
Unreviewed
CVE-2023-50938
was published
Feb 2, 2024
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Moderate
Unreviewed
CVE-2024-30055
was published
May 14, 2024
By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid...
Moderate
Unreviewed
CVE-2024-5698
was published
Jun 11, 2024
In certain scenarios a malicious website could attempt to display a fake location URL bar which...
Moderate
Unreviewed
CVE-2024-38313
was published
Jun 13, 2024
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Moderate
Unreviewed
CVE-2024-38082
was published
Jun 20, 2024
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Moderate
Unreviewed
CVE-2024-38093
was published
Jun 20, 2024
Form validation popups could capture escape key presses. Therefore, spamming form validation...
Moderate
Unreviewed
CVE-2024-6610
was published
Jul 9, 2024
Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105...
Moderate
Unreviewed
CVE-2023-7011
was published
Jul 17, 2024
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote...
Moderate
Unreviewed
CVE-2024-6999
was published
Aug 6, 2024
Microsoft Teams for iOS Spoofing Vulnerability
Moderate
Unreviewed
CVE-2024-38197
was published
Aug 13, 2024
Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a...
Moderate
Unreviewed
CVE-2024-8909
was published
Sep 17, 2024
Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a...
Moderate
Unreviewed
CVE-2023-7282
was published
Sep 24, 2024
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a...
Moderate
Unreviewed
CVE-2023-7281
was published
Sep 24, 2024
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote...
Moderate
Unreviewed
CVE-2024-7019
was published
Sep 24, 2024
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote...
Moderate
Unreviewed
CVE-2024-7020
was published
Sep 24, 2024
Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST...
Moderate
Unreviewed
CVE-2024-47044
was published
Sep 26, 2024
Dell E-Lab Navigator, [3.1.9, 3.2.0], contains an Insecure Direct Object Reference Vulnerability...
Moderate
Unreviewed
CVE-2024-22455
was published
Oct 16, 2024
IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content...
Moderate
Unreviewed
CVE-2024-55896
was published
Jan 4, 2025
Windows SmartScreen Spoofing Vulnerability
Moderate
Unreviewed
CVE-2025-21314
was published
Jan 14, 2025
ProTip!
Advisories are also available from the
GraphQL API