GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
49
Go
3,413
Maven
5,000+
npm
5,000+
NuGet
882
pip
4,656
Pub
13
RubyGems
1,027
Rust
1,209
Swift
53
Unreviewed advisories
All unreviewed
5,000+
52 advisories
Filter by severity
WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the...
Moderate
Unreviewed
CVE-2019-25677
was published
Apr 5, 2026
mlflow Creates of Temporary File in Directory with Insecure Permissions
High
CVE-2025-10279
was published
for
mlflow
(pip)
Feb 2, 2026
pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern,...
Moderate
Unreviewed
CVE-2025-71176
was published
Jan 22, 2026
Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary...
Moderate
Unreviewed
CVE-2025-64896
was published
Dec 9, 2025
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is...
Moderate
Unreviewed
CVE-2025-33111
was published
Dec 9, 2025
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI...
High
Unreviewed
CVE-2024-7562
was published
Jun 12, 2025
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
High
CVE-2024-12911
was published
for
llama-index
(pip)
Mar 20, 2025
Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in...
Moderate
Unreviewed
CVE-2025-21162
was published
Feb 11, 2025
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows
unauthenticated...
High
Unreviewed
CVE-2024-9950
was published
Jan 2, 2025
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by...
High
Unreviewed
CVE-2024-9500
was published
Nov 16, 2024
Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local...
High
Unreviewed
CVE-2023-6080
was published
Oct 18, 2024
Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate...
High
Unreviewed
CVE-2024-36821
was published
Jun 11, 2024
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected...
Low
Unreviewed
CVE-2023-38533
was published
Jun 11, 2024
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5...
High
Unreviewed
CVE-2024-24693
was published
Mar 13, 2024
The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a...
High
Unreviewed
CVE-2023-3181
was published
Jan 25, 2024
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2023-40438
was published
Jan 11, 2024
Local Privilege Escalation in Windows
High
CVE-2023-49797
was published
for
pyinstaller
(pip)
Dec 9, 2023
A vulnerability was found in insights-client. This security issue occurs because of insecure file...
High
Unreviewed
CVE-2023-3972
was published
Nov 1, 2023
The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is...
High
Unreviewed
CVE-2023-37243
was published
Oct 31, 2023
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A...
High
Unreviewed
CVE-2023-32450
was published
Jul 27, 2023
Guava vulnerable to insecure use of temporary directory
Moderate
CVE-2023-2976
was published
for
com.google.guava:guava
(Maven)
Jun 14, 2023
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are...
High
Unreviewed
CVE-2023-26396
was published
Apr 12, 2023
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005...
High
Unreviewed
CVE-2023-21611
was published
Jan 18, 2023
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005...
High
Unreviewed
CVE-2023-21612
was published
Jan 18, 2023
ProTip!
Advisories are also available from the
GraphQL API