How many GitHub advisory-database CVEs are in CISA KEV?

None of GitHub advisory-database's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in GitHub advisory-database CVEs?

GitHub advisory-database's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-321 (Use of Hard-coded Cryptographic Key), CWE-326 (Inadequate Encryption Strength).

How many critical GitHub advisory-database vulnerabilities are there?

GitHub advisory-database has 1 critical and 7 high-severity CVEs.

What is the average severity of GitHub advisory-database CVEs?

The average CVSS base score across GitHub advisory-database's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

GitHub

13 CVEs

GitHub advisory-database Vulnerabilities

Name: GitHub advisory-database vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for advisory-database by GitHub.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

8

Public exploits

PoC or exploit code

6.5

Avg CVSS

2023–2026

Last updated May 8, 2026

Overview

GitHub advisory-database has 13 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting GitHub advisory-database, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of GitHub advisory-database's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High7

Medium2

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of GitHub advisory-database's CVEs are currently listed in CISA's KEV catalog.

Public exploits

8

8 of GitHub advisory-database's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every GitHub advisory-database version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for GitHub advisory-database; the CVEs below apply to the product without a version pin.

13 CVEs

Sort

High vulnerability · 2026-05-08
CVE-2026-38361
Public exploit
CWE-670
High · CVSS 7.5
EPSS 2.6% (84th pct)2026-05-08
Critical vulnerability · 2026-05-08
CVE-2026-38360
Public exploit
CWE-22
Critical · CVSS 9.8
EPSS 6.0% (92th pct)2026-05-08
High vulnerability · 2026-02-11
CVE-2025-69873
Public exploit
Patch
CWE-1333
High · CVSS 7.5
EPSS 0.5% (39th pct)2026-02-11
Medium vulnerability · 2025-07-31
CVE-2025-45769
Public exploit
Patch
CWE-326
Medium · CVSS 6.5
EPSS 0.1% (3th pct)2025-07-31
Low vulnerability · 2025-07-20
CVE-2025-54314
Patch
CWE-78
Low · CVSS 2.8
EPSS 0.2% (5th pct)2025-07-20
Low vulnerability · 2025-06-17
CVE-2025-45526
Public exploit
Patch
CWE-770
Low · CVSS 2.9
EPSS 0.1% (2th pct)2025-06-17
Low vulnerability · 2025-06-17
CVE-2025-45525
Public exploit
Patch
CWE-476
Low · CVSS 2.9
EPSS 0.1% (3th pct)2025-06-17
High vulnerability · 2024-11-29
CVE-2024-36611
Patch
CWE-863
High · CVSS 7.5
EPSS 0.8% (51th pct)2024-11-29
High vulnerability · 2024-08-01
CVE-2024-41260
Public exploit
Patch
CWE-321
High · CVSS 7.5
EPSS 0.5% (37th pct)2024-08-01
KaTeX's maxExpand bypassed by \edef
CVE-2024-28243
Patch
CWE-674
Medium · CVSS 6.5
EPSS 1.4% (70th pct)2024-03-25
High vulnerability · 2024-02-01
CVE-2024-22859
Patch
CWE-352
High · CVSS 8.8
EPSS 0.5% (37th pct)2024-02-01
High vulnerability · 2023-09-21
CVE-2023-43669
Patch
High · CVSS 7.5
EPSS 1.6% (73th pct)2023-09-21
High vulnerability · 2023-06-13
CVE-2023-30179
Public exploit
Patch
CWE-94
High · CVSS 7.2
EPSS 2.2% (81th pct)2023-06-13

Common weakness types

The CWE weakness categories most often found in GitHub advisory-database CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many GitHub advisory-database CVEs were published each year.

2023

2

2024

4

2025

4

2026

3

Other GitHub products

Browse vulnerabilities for other products by GitHub.

Enterprise Server119 CVEs GitHub Enterprise Server46 CVEs cmark-gfm11 CVEs github9 CVEs cli4 CVEs advisory-review3 CVEs secure_headers3 CVEs codeql-action2 CVEs

All GitHub vulnerabilities

Frequently asked questions

Common questions about GitHub advisory-database vulnerabilities.

How many CVEs does GitHub advisory-database have?: GitHub advisory-database has 13 published CVE records since 2023.
How many GitHub advisory-database CVEs are in CISA KEV?: None of GitHub advisory-database's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for GitHub advisory-database vulnerabilities?: Yes — 8 of GitHub advisory-database's CVEs have a known public exploit.
What are the most common weakness types in GitHub advisory-database CVEs?: GitHub advisory-database's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-321 (Use of Hard-coded Cryptographic Key), CWE-326 (Inadequate Encryption Strength).
How many critical GitHub advisory-database vulnerabilities are there?: GitHub advisory-database has 1 critical and 7 high-severity CVEs.
What is the average severity of GitHub advisory-database CVEs?: The average CVSS base score across GitHub advisory-database's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track GitHub advisory-database vulnerabilities

Monitor new GitHub advisory-database vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing