Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,726
Maven
5,000+
npm
4,331
NuGet
763
pip
4,107
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+

115,046 advisories

Loading
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion... High Unreviewed
CVE-2025-48594 was published Dec 8, 2025
In multiple locations, there is a possible way for an application on a work profile to set the... High Unreviewed
CVE-2025-48612 was published Dec 8, 2025
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand... High Unreviewed
CVE-2025-48589 was published Dec 8, 2025
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer... High Unreviewed
CVE-2025-48592 was published Dec 8, 2025
In multiple locations, there is a possible way to trick a user into accepting a permission due to... High Unreviewed
CVE-2025-48597 was published Dec 8, 2025
In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device... High Unreviewed
CVE-2025-48599 was published Dec 8, 2025
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic... High Unreviewed
CVE-2025-48588 was published Dec 8, 2025
In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence... High Unreviewed
CVE-2025-48615 was published Dec 8, 2025
In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a... High Unreviewed
CVE-2025-48620 was published Dec 8, 2025
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due... High Unreviewed
CVE-2025-48583 was published Dec 8, 2025
In multiple locations, there is a possible way to launch activities from the background due to a... High Unreviewed
CVE-2025-48572 was published Dec 8, 2025
In multiple locations, there is a possible way to leak audio files across user profiles due to a... High Unreviewed
CVE-2025-22420 was published Dec 8, 2025
In multiple locations, there is a possible bypass of user profile boundary with a forwarded... High Unreviewed
CVE-2025-48566 was published Dec 8, 2025
In multiple locations, there is a possible intent filter bypass due to a race condition. This... High Unreviewed
CVE-2025-48564 was published Dec 8, 2025
In multiple functions of Session.java, there is a possible way to view images belonging to a... High Unreviewed
CVE-2025-32329 was published Dec 8, 2025
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue... High Unreviewed
CVE-2025-48525 was published Dec 8, 2025
In multiple locations, there is a possible way to bypass the cross profile intent filter due to a... High Unreviewed
CVE-2025-48565 was published Dec 8, 2025
In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for... High Unreviewed
CVE-2025-48536 was published Dec 8, 2025
In multiple functions of NotificationStation.java, there is a possible cross-profile information... High Unreviewed
CVE-2025-48555 was published Dec 8, 2025
In multiple functions of Session.java, there is a possible way to view images belonging to a... High Unreviewed
CVE-2025-32328 was published Dec 8, 2025
In connectInternal of MediaBrowser.java, there is a possible way to access while in use... High Unreviewed
CVE-2025-48580 was published Dec 8, 2025
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground... High Unreviewed
CVE-2025-48573 was published Dec 8, 2025
1Panel – CAPTCHA Bypass via Client-Controlled Flag High
CVE-2025-66507 was published for github.com/1Panel-dev/1Panel (Go) Dec 8, 2025
aliyevmursal
Credited to aliyevmursal
Some endpoints in vulnerability-lookup that modified application state (e.g. changing database... High Unreviewed
CVE-2025-42616 was published Dec 8, 2025
In affected versions, vulnerability-lookup handled user-controlled content in comments and... High Unreviewed
CVE-2025-42620 was published Dec 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database