GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
191 advisories
Filter by severity
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6...
High
Unreviewed
CVE-2022-1459
was published
Apr 26, 2022
An Insecure Direct Object Reference issue exists in the Tyler Odyssey platform before 17.1.20....
High
Unreviewed
CVE-2022-26665
was published
Apr 19, 2022
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control...
High
Unreviewed
CVE-2022-22190
was published
Apr 15, 2022
Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to...
High
Unreviewed
CVE-2021-46416
was published
Apr 8, 2022
Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files...
High
Unreviewed
CVE-2021-43957
was published
Mar 17, 2022
An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any...
High
Unreviewed
CVE-2022-25471
was published
Mar 4, 2022
The backend infrastructure shared by multiple mobile device monitoring services does not...
High
Unreviewed
CVE-2022-0732
was published
Feb 25, 2022
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0...
High
Unreviewed
CVE-2022-22828
was published
Jan 28, 2022
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow...
High
Unreviewed
CVE-2021-3965
was published
Jan 15, 2022
growi is vulnerable to Authorization Bypass Through User-Controlled Key
High
Unreviewed
CVE-2021-3852
was published
Jan 13, 2022
Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote...
High
Unreviewed
CVE-2021-44160
was published
Dec 30, 2021
The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to...
High
Unreviewed
CVE-2021-24739
was published
Dec 22, 2021
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
High
CVE-2021-41120
was published
for
sylius/paypal-plugin
(Composer)
Oct 6, 2021
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
High
CVE-2021-41129
was published
for
pterodactyl/panel
(Composer)
Oct 4, 2021
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
High
CVE-2018-1000210
was published
for
YamlDotNet
(NuGet)
Oct 16, 2018
ProTip!
Advisories are also available from the
GraphQL API