Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

58 advisories

Loading
Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. ... Moderate Unreviewed
CVE-2026-85243 was published Oct 19, 2026
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip... Moderate Unreviewed
CVE-2026-109366 was published Oct 12, 2026
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security... Moderate Unreviewed
CVE-2026-84900 was published Oct 5, 2026
NetX Secure TLS accepts an empty application-data record without verifying its message... Moderate Unreviewed
CVE-2026-102759 was published Sep 29, 2026
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature... Moderate Unreviewed
CVE-2026-95625 was published Sep 23, 2026
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption... Moderate Unreviewed
CVE-2026-20354 was published Sep 2, 2026
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical... Moderate Unreviewed
CVE-2026-56416 was published Jul 22, 2026
wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the... Moderate Unreviewed
CVE-2026-8720 was published Jun 26, 2026
Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt... Moderate Unreviewed
CVE-2026-49230 was published Jun 19, 2026
A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover... Moderate Unreviewed
CVE-2026-5504 was published Apr 10, 2026
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause... Moderate Unreviewed
CVE-2025-33193 was published Nov 25, 2025
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for... Moderate Unreviewed
CVE-2025-4418 was published Jun 12, 2025
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is... Moderate Unreviewed
CVE-2025-3479 was published Apr 17, 2025
The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and... Moderate Unreviewed
CVE-2025-3247 was published Apr 16, 2025
An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2... Moderate Unreviewed
CVE-2024-47573 was published Mar 14, 2025
Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect ... Moderate Unreviewed
CVE-2024-47935 was published Feb 17, 2025
There is an insufficient integrity vulnerability in Huawei products. A module does not perform... Moderate Unreviewed
CVE-2020-9210 was published Dec 27, 2024
A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying... Moderate Unreviewed
CVE-2024-56169 was published Dec 18, 2024
Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16... Moderate Unreviewed
CVE-2024-49406 was published Nov 6, 2024
In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges... Moderate Unreviewed
CVE-2024-47255 was published Nov 5, 2024
In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to... Moderate Unreviewed
CVE-2024-49875 was published Oct 21, 2024
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ... Moderate Unreviewed
CVE-2024-45789 was published Sep 11, 2024
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during... Moderate Unreviewed
CVE-2023-24063 was published Aug 8, 2024
An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It... Moderate Unreviewed
CVE-2024-31958 was published Jun 7, 2024
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on... Moderate Unreviewed
CVE-2024-23461 was published May 2, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database