GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,741
NuGet
668
pip
3,422
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
399 advisories
Filter by severity
JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance.
Critical
Unreviewed
CVE-2023-26234
was published
Feb 21, 2023
IBM Aspera Faspex 4.4.1 could allow a remote attacker to execute arbitrary code on the system,...
Critical
Unreviewed
CVE-2022-47986
was published
Feb 17, 2023
vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code...
Critical
Unreviewed
CVE-2023-25135
was published
Feb 3, 2023
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be...
Critical
Unreviewed
CVE-2022-32521
was published
Jan 31, 2023
A vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp....
Critical
Unreviewed
CVE-2022-4890
was published
Jan 16, 2023
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by...
Critical
Unreviewed
CVE-2022-46478
was published
Jan 13, 2023
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6...
Critical
Unreviewed
CVE-2022-4120
was published
Dec 26, 2022
Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary...
Critical
Unreviewed
CVE-2021-38241
was published
Dec 17, 2022
The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the...
Critical
Unreviewed
CVE-2022-3900
was published
Dec 12, 2022
Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin...
Critical
Unreviewed
CVE-2022-44351
was published
Dec 7, 2022
hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).
Critical
Unreviewed
CVE-2022-44371
was published
Dec 7, 2022
** UNSUPPORTED WHEN ASSIGNED ** A remote unauthenticated insecure deserialization vulnerability...
Critical
Unreviewed
CVE-2022-38650
was published
Nov 12, 2022
** UNSUPPORTED WHEN ASSIGNED ** A remote insecure deserialization vulnerability exixsts in VMWare...
Critical
Unreviewed
CVE-2022-38652
was published
Nov 12, 2022
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful...
Critical
Unreviewed
CVE-2022-44559
was published
Nov 10, 2022
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful...
Critical
Unreviewed
CVE-2022-44558
was published
Nov 10, 2022
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording...
Critical
Unreviewed
CVE-2022-31199
was published
Nov 8, 2022
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied...
Critical
Unreviewed
CVE-2022-38142
was published
Nov 1, 2022
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network...
Critical
Unreviewed
CVE-2022-41779
was published
Nov 1, 2022
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of...
Critical
Unreviewed
CVE-2022-44542
was published
Nov 1, 2022
OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the...
Critical
Unreviewed
CVE-2022-43019
was published
Oct 19, 2022
Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.
Critical
Unreviewed
CVE-2022-40889
was published
Oct 18, 2022
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).
Critical
Unreviewed
CVE-2018-18447
was published
Oct 13, 2022
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
Critical
Unreviewed
CVE-2018-18446
was published
Oct 13, 2022
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services...
Critical
Unreviewed
CVE-2022-31680
was published
Oct 8, 2022
The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation...
Critical
Unreviewed
CVE-2022-39008
was published
Sep 17, 2022
ProTip!
Advisories are also available from the
GraphQL API