Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+

2,660 advisories

Loading
Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2024-47292 was published Sep 27, 2024
czim/file-handling vulnerable to SSRF and directory traversal Moderate
CVE-2024-47049 was published for czim/file-handling (Composer) Sep 17, 2024
The vulnerability allows an attacker to craft MQTT messages that include relative path traversal... Moderate Unreviewed
CVE-2024-6786 was published Sep 21, 2024
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up... Moderate Unreviewed
CVE-2024-9224 was published Oct 1, 2024
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location Moderate
CVE-2022-23522 was published for mindsdb (pip) Mar 30, 2023
Sim4n6
Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions... Moderate Unreviewed
CVE-2024-9100 was published Oct 3, 2024
@saltcorn/server arbitrary file zip read and download when downloading auto backups Moderate
GHSA-277h-px4m-62q8 was published for @saltcorn/server (npm) Oct 3, 2024
dellalibera
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... Moderate Unreviewed
CVE-2024-9146 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... Moderate Unreviewed
CVE-2024-47309 was published Oct 5, 2024
Path traversal in Onionshare Moderate
CVE-2022-21693 was published for onionshare-cli (pip) Jan 21, 2022
A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0).... Moderate Unreviewed
CVE-2024-47563 was published Oct 8, 2024
open-webui allows writing and deleting arbitrary files Moderate
CVE-2024-7037 was published for open-webui (pip) Oct 9, 2024
The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file... Moderate Unreviewed
CVE-2024-7514 was published Oct 11, 2024
Gradio has a one-level read path traversal in `/custom_component` Moderate
CVE-2024-47166 was published for gradio (pip) Oct 10, 2024
ahpaleus Vasco-jofra
Gradio's `is_in_or_equal` function may be bypassed Moderate
CVE-2024-47164 was published for gradio (pip) Oct 10, 2024
Vasco-jofra ahpaleus
Gradio has several components with post-process steps allow arbitrary file leaks Moderate
CVE-2024-47868 was published for gradio (pip) Oct 10, 2024
ahpaleus Vasco-jofra
Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. Moderate
CVE-2024-47877 was published for github.com/codeclysm/extract (Go) Oct 11, 2024
buglloc cmaglie
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary... Moderate Unreviewed
CVE-2024-47949 was published Oct 8, 2024
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was... Moderate Unreviewed
CVE-2024-47948 was published Oct 8, 2024
NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal... Moderate Unreviewed
CVE-2023-41356 was published Nov 3, 2023
Directory traversal in pyftpdlib Moderate
CVE-2008-7262 was published for pyftpdlib (pip) May 17, 2022
NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path... Moderate Unreviewed
CVE-2024-0129 was published Oct 15, 2024
Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through... Moderate Unreviewed
CVE-2023-7260 was published Aug 22, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... Moderate Unreviewed
CVE-2024-47841 was published Oct 5, 2024
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled Moderate
CVE-2024-45291 was published for phpoffice/phpspreadsheet (Composer) Oct 7, 2024
emilvirkki
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database