Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

77 advisories

Loading
Secure Boot Security Feature Bypass Vulnerability Moderate Unreviewed
CVE-2024-20669 was published Apr 9, 2024
BitLocker Security Feature Bypass Vulnerability Moderate Unreviewed
CVE-2024-20665 was published Apr 9, 2024
RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability. This vulnerability allows remote attackers to... Moderate Unreviewed
CVE-2024-30370 was published Apr 2, 2024
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Moderate Unreviewed
CVE-2024-26163 was published Mar 15, 2024
Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when... Moderate Unreviewed
CVE-2023-22655 was published Mar 14, 2024
Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an... Moderate Unreviewed
CVE-2023-39368 was published Mar 14, 2024
A CWE-693 “Protection Mechanism Failure” vulnerability in the embedded Chromium browser ... Moderate Unreviewed
CVE-2023-45593 was published Mar 5, 2024
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Moderate Unreviewed
CVE-2024-21423 was published Feb 24, 2024
Corveda PHPSandbox Protection Mechanism Failure vulnerability Moderate
CVE-2014-125107 was published for corveda/phpsandbox (Composer) Dec 19, 2023
Protection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before... Moderate Unreviewed
CVE-2023-25080 was published Nov 14, 2023
Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library... Moderate Unreviewed
CVE-2023-27383 was published Nov 14, 2023
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1... Moderate Unreviewed
CVE-2023-45372 was published Oct 9, 2023
Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 sold between... Moderate Unreviewed
CVE-2022-41984 was published Aug 11, 2023
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a... Moderate Unreviewed
CVE-2022-46329 was published Aug 11, 2023
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All... Moderate Unreviewed
CVE-2023-30757 was published Jun 13, 2023
Potential HTTP policy bypass when using header rules in Cilium Moderate
CVE-2023-30851 was published for github.com/cilium/cilium (Go) May 22, 2023
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass... Moderate Unreviewed
CVE-2023-0085 was published Mar 2, 2023
Jenkins NUnit Plugin vulnerable to Protection Mechanism Failure Moderate
CVE-2022-43414 was published for org.jenkins-ci.plugins:nunit (Maven) Oct 19, 2022
Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin Moderate
CVE-2022-43423 was published for com.compuware.jenkins:compuware-scm-downloader (Maven) Oct 19, 2022
NotMyFault
Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin Moderate
CVE-2022-43424 was published for com.compuware.jenkins:compuware-xpediter-code-coverage (Maven) Oct 19, 2022
NotMyFault
Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin Moderate
CVE-2022-43422 was published for com.compuware.jenkins:compuware-topaz-utilities (Maven) Oct 19, 2022
NotMyFault
Jenkins WildFly Deployer Plugin vulnerable to path traversal Moderate
CVE-2022-41235 was published for org.jenkins-ci.plugins:wildfly-deployer (Maven) Sep 22, 2022
NotMyFault
Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin Moderate
CVE-2022-36899 was published for com.compuware.jenkins:compuware-ispw-operations (Maven) Jul 28, 2022
NotMyFault
Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure Moderate
CVE-2022-36900 was published for com.compuware.jenkins:compuware-zadviser-api (Maven) Jul 28, 2022
Agent-to-controller security bypass in Jenkins xUnit Plugin Moderate
CVE-2022-34181 was published for org.jenkins-ci.plugins:xunit (Maven) Jun 24, 2022
NotMyFault
ProTip! Advisories are also available from the GraphQL API