Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,873
Erlang
37
GitHub Actions
36
Go
2,519
Maven
5,000+
npm
4,156
NuGet
736
pip
3,956
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+

2,906 advisories

Loading
A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5.... Moderate Unreviewed
CVE-2025-8665 was published Aug 6, 2025
A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U... Moderate Unreviewed
CVE-2025-45512 was published Aug 5, 2025
A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input... Moderate Unreviewed
CVE-2025-50688 was published Aug 5, 2025
mcp-package-docs vulnerable to command injection in several tools High
CVE-2025-54073 was published for mcp-package-docs (npm) Aug 5, 2025
dellalibera
@nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers Critical
CVE-2025-54782 was published for @nestjs/devtools-integration (npm) Aug 1, 2025
JLLeitschuh
1Panel agent certificate verification bypass leading to arbitrary command execution High
CVE-2025-54424 was published for github.com/1Panel-dev/1Panel/core (Go) Aug 1, 2025
lizicoco
An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to... Critical Unreviewed
CVE-2025-26063 was published Jul 31, 2025
A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows... Moderate Unreviewed
CVE-2025-25691 was published Jul 30, 2025
An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to execute arbitrary... Moderate Unreviewed
CVE-2025-45619 was published Jul 30, 2025
A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows... Moderate Unreviewed
CVE-2025-25692 was published Jul 30, 2025
Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in... Moderate Unreviewed
CVE-2025-52284 was published Jul 29, 2025
A vulnerability, which was classified as critical, was found in Vaelsys 4.1.0. This affects the... Moderate Unreviewed
CVE-2025-8259 was published Jul 28, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as... High Unreviewed
CVE-2025-8244 was published Jul 28, 2025
tj-actions/branch-names has a Command Injection Vulnerability Critical
CVE-2025-54416 was published for tj-actions/branch-names (GitHub Actions) Jul 25, 2025
tutasla
An issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute... High Unreviewed
CVE-2025-29628 was published Jul 25, 2025
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows... Moderate Unreviewed
CVE-2025-51472 was published Jul 22, 2025
File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0... Moderate Unreviewed
CVE-2025-51459 was published Jul 22, 2025
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139... Moderate Unreviewed
CVE-2025-46122 was published Jul 21, 2025
@translated/lara-mcp vulnerable to command injection in import_tmx tool High
CVE-2025-53832 was published for @translated/lara-mcp (npm) Jul 21, 2025
dellalibera
A vulnerability classified as critical has been found in Eluktronics Control Center 5.23.51.41.... High Unreviewed
CVE-2025-7883 was published Jul 20, 2025
A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical.... Moderate Unreviewed
CVE-2025-7788 was published Jul 18, 2025
Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution ... High Unreviewed
CVE-2023-47356 was published Jul 17, 2025
Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in... Critical Unreviewed
CVE-2025-52046 was published Jul 17, 2025
Successful exploitation of the vulnerability could allow an attacker to execute arbitrary... High Unreviewed
CVE-2025-52690 was published Jul 16, 2025
Successful exploitation of the vulnerability could allow an attacker with administrator... Low Unreviewed
CVE-2025-52687 was published Jul 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database