GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
977 advisories
Filter by severity
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates...
Critical
Unreviewed
CVE-2023-24540
was published
May 11, 2023
Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57583
was published
Jan 16, 2025
The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.
Critical
Unreviewed
CVE-2024-54794
was published
Jan 21, 2025
ruby-saml vulnerable to XPath injection
Critical
CVE-2015-20108
was published
for
ruby-saml
(RubyGems)
May 27, 2023
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink...
Critical
Unreviewed
CVE-2024-39360
was published
Jan 14, 2025
An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of...
Critical
Unreviewed
CVE-2024-37186
was published
Jan 14, 2025
An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun()...
Critical
Unreviewed
CVE-2024-39367
was published
Jan 14, 2025
An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync()...
Critical
Unreviewed
CVE-2024-34166
was published
Jan 14, 2025
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg,...
Critical
Unreviewed
CVE-2025-22949
was published
Jan 10, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39783
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39764
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39781
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of...
Critical
Unreviewed
CVE-2024-39782
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39759
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39763
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39762
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39760
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality...
Critical
Unreviewed
CVE-2024-39761
was published
Jan 14, 2025
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing()...
Critical
Unreviewed
CVE-2024-39765
was published
Jan 14, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57225
was published
Jan 10, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57224
was published
Jan 10, 2025
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...
Critical
Unreviewed
CVE-2024-57223
was published
Jan 10, 2025
LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL...
Critical
Unreviewed
CVE-2023-26801
was published
Mar 26, 2023
A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which...
Critical
Unreviewed
CVE-2024-55414
was published
Jan 7, 2025
D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command...
Critical
Unreviewed
CVE-2022-37056
was published
Aug 29, 2022
ProTip!
Advisories are also available from the
GraphQL API